Privacy policy.
Last updated . This explains what we collect, why, and what you can do about it. Short version: we collect the minimum needed to sell to you and deliver what you bought, and we do not sell anything to anyone.
01. Who we are
("we", "us") runs the store on this website. We are the data controller for the personal data described here.
- Address:
- Email:
- Discord: our server
02. What we collect
Only what selling to you actually needs:
- Your email address — collected by Stripe at checkout, so you get a receipt and we can reach you about your order.
- Your Discord username — you type this at checkout so we can match the payment to you and deliver in a ticket.
- Order details — what you bought, the amount, the date and a payment reference.
- What you send us in a Discord ticket — briefs, reference images, promo material and messages.
- Access you give us for a job — for example a bot token or a role on your Discord server while we build a bot or set a server up. It is used only for that job. Change or remove it once the job is done.
We do not use analytics, advertising pixels or tracking cookies. We do not profile you and there is no automated decision-making. We never see or store your card details — those go straight to Stripe.
03. Cookies
The public site sets no cookies at all. The staff admin area sets a single sign-in cookie when one of us logs in. It is strictly necessary for that page to work, so it does not need consent. That is why there is no cookie banner.
Fonts are loaded from Google Fonts, so Google receives your IP address when the page loads. A browser that blocks third-party requests will stop that, and the site still works.
04. Why we are allowed to hold it
Under UK GDPR our lawful bases are:
- Performance of a contract — we cannot deliver what you bought without your contact details and your brief.
- Legal obligation — HMRC requires records of sales.
- Legitimate interests — keeping order records so we can support you afterwards and deal with disputes or chargebacks.
05. Who else sees it
- Stripe — processes payments and holds your email and card details as its own controller. See Stripe's privacy policy.
- Discord — where tickets and delivery happen, under its privacy policy.
- Our hosting provider — runs the server this website is on.
We do not sell, rent or share your data for marketing. We only disclose it further if the law requires it.
06. Where it goes
Stripe and Discord are US companies, and our hosting provider may store data outside the UK. Those transfers rely on the UK's adequacy regulations or the providers' standard contractual clauses.
07. How long we keep it
- Order records — 6 years, because HMRC requires it.
- Discord tickets — until the ticket is closed and cleared, or you ask us to delete them.
- Briefs, images and promo material — while the job runs, then deleted when you ask.
- Access you gave us for a job — removed when the job is finished.
08. Your rights
Under UK GDPR you can ask us to:
- give you a copy of what we hold about you
- correct anything that is wrong
- delete it, where we are not legally required to keep it
- restrict or object to how we use it
- send it to you or someone else in a portable format
Email and we will respond within one month, free of charge. If you are unhappy with how we handle it you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
09. Children
You must be 18 or over to buy, or buying with a parent's or guardian's permission. We do not knowingly collect data from children beyond what their parent or guardian gives us to complete an order.
10. Security
The site is served over HTTPS. Card details never touch our server. Order records are only visible to named staff accounts, and we keep everything to the minimum we need. No system is perfectly secure, but if a breach ever put you at risk we would tell you and the ICO.
11. Changes
If this policy changes, the date at the top changes with it. The version that applies to your order is the one published on the day you ordered.