What we collect and why

• Account: email, password (stored hashed by Firebase), display name and, once you verify with Discord, your Discord username, to run your account.
• Purchases: the bot you bought, your email and the Stripe checkout ID, to deliver your download and keep the records the law requires.
• Reviews and custom requests: what you write in them, plus your name and Discord username, to show reviews and answer requests.
• Discord check: before you send a custom request, you verify with Discord. Discord gives your browser temporary access to your username and the list of servers you're in; we only use it to check that you're in our server, and we save just your username, Discord ID and the date you verified with the request and on your account.

We never see your card details. We don't use analytics, advertising or tracking cookies.

Who processes it for us

• Google Firebase hosts the site, log-in and database (database stored in the EU).
• Stripe handles payments, under its own privacy policy.
• Make.com confirms payments with Stripe to unlock your download.
• Discord, if you contact us there or verify your Discord account for a custom request.

Some of these providers may process data in the USA under recognised EU safeguards. We never sell your data.

How long we keep it

Account data until you delete your account. Purchase records for as long as accounting law requires.

Your rights

You can delete your account yourself at any time from your account page. You can also ask to access, correct, delete or export your data, or object to how we use it, by emailing pfalmchr@gmail.com.

Browser storage

We only store what the site needs to work: your log-in session, your checkout ID for a short time after payment, and a Discord access token for up to 7 days (removed when you log out), used to re-check that you're still in our server. Stripe may set cookies on the shop and checkout to prevent fraud.