Privacy Policy

For the purposes of the GDPR, the data controller is ItsMarwan, reachable on Discord at itsmarwan or via the shop links in the footer. There is no separate data protection officer - contact me directly for any privacy request.

• Account data: when you sign in with Discord, I receive your Discord user ID, username, and avatar URL from Discord's OAuth flow.
• Purchase & license data: the transaction or membership ID you submit to redeem a Product, which item it's linked to, and the status of the resulting license (instant, pending, active, revoked). Where you pay using the direct checkout / “Pay with Card” option, the payment is processed on Buy Me a Coffee and I only receive the transaction reference or membership details returned from that platform.
• Download data: a per-license fingerprint and download record used to trace unauthorized redistribution, as described in the License & Usage Terms.
• Technical data: standard request logs (IP address, browser user-agent, timestamps) generated automatically by the hosting infrastructure.
• Support data: anything you send me directly on Discord when requesting help.

I don't collect payment card details - Buy Me a Coffee and Patreon process payments directly and only pass me a transaction reference. For direct “Pay with Card” purchases, the transaction is completed on Buy Me a Coffee and not on this Site.

I do not offer refunds, price adjustments, credits, or compensation for purchases made before a sale, discount, bundle update, or similar promotional period. Once a license has been issued or a download has been accessed, purchase timing relative to a future sale does not create any right to a refund, partial refund, reimbursement, or compensation.

• Performance of a contract - creating your account, verifying a purchase, and issuing or revoking a license.
• Legitimate interest - fingerprinting downloads and keeping request logs to prevent leaks, fraud, and abuse of the storefront.
• Legal obligation - retaining records where needed to comply with applicable law, or to pursue the legal remedies described in the License & Usage Terms in the event of a violation.

• Supabase - hosts the account, license, and catalog database.
• Discord - provides sign-in (OAuth) and, where applicable, server moderation such as bans for leaks.
• Buy Me a Coffee & Patreon - process your payment/pledge directly; I only receive a transaction reference back from them. For direct “Pay with Card” purchases, the payment is handled on Buy Me a Coffee and not on this Site.

I don't sell your data, and I don't share it with anyone for advertising purposes.

Some of the providers above (including Supabase, Vercel, and Discord) may process data outside the EEA/UK. Where that happens, they rely on their own GDPR-compliant transfer mechanisms, such as Standard Contractual Clauses - see each provider's own privacy policy for details.

Account and license data is kept for as long as your account is active, so your library and licenses keep working. Download fingerprints tied to a specific purchase are retained for as long as needed to investigate leaks or disputes over that purchase. Request logs are retained only as long as the hosting provider's default log retention window. You can ask me to delete your account data at any time (see your rights below).

The Site uses only strictly necessary browser storage to keep you signed in (via Supabase/Discord authentication) - there are no advertising or analytics cookies. Because this storage is strictly necessary to provide the service you've requested (staying signed in), it doesn't require separate consent under EU cookie rules, but I still surface a short notice on your first visit for transparency.

If you're located in the EEA or UK, you have the right to:

• Access the data I hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”), subject to any records I'm legally required to keep.
• Restrict or object to certain processing.
• Port your data to another service in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact me on Discord (@itsmarwan.). I'll respond within one month, as required by the GDPR.

Automated decisions: license fingerprinting and stock/availability checks are automated, but any action with a real effect on you - like revoking a license or banning an account over a suspected leak - is reviewed by me personally before it's final, not decided solely by an automated system.

If you're a California resident, you have similar rights to those above - including the right to know what personal information I've collected about you, to request deletion, and to request correction. I don't sell or “share” your personal information as those terms are defined under the CCPA/CPRA, and I don't use it for cross-context behavioral advertising. To exercise these rights, contact me using the details below.

I use reasonable technical and organizational measures (such as access controls on the database and hosting infrastructure) to protect your data, but no method of storage or transmission is 100% secure. If a breach occurs that's likely to put your rights or freedoms at risk, I'll notify affected users and the relevant supervisory authority without undue delay, as required by the GDPR.

The Site isn't directed at children, and Products aren't knowingly sold to anyone below the minimum age required by Discord's or the relevant payment platform's own terms. You must be at least 16 years old to purchase, access, or use any Product or asset sold on this Site.

I may update this Privacy Policy from time to time. Material changes will update the “Last updated” date above.

• Discord: itsmarwan
• buymeacoffee.com/itsmarwan
• patreon.com/itsmarwan