What we collect
- Accounts. If you create an account we store your username, your role and a one-way hash of your password. If you turn on two-factor authentication we store its secret encrypted.
- A sign-in cookie. Logging in sets one cookie that keeps you signed in. It is needed for the site to work and is not used for tracking.
- Visit statistics. Page views are counted with a self-hosted, cookie-free analytics tool. It records the page, referrer, browser type and country — not your name or a tracking ID.
- Purchases. Payments are handled by Stripe or PayPal on their own pages; card details never reach this site. We keep the order, the amount and the email the payment provider gives us, encrypted.
- Requests you send us. Messages sent through the partner/affiliate form are stored with your name and email encrypted.
- Public replies on our social posts. Comments and replies left on our Discord, Facebook, Instagram and YouTube posts are collected into a private inbox so we can answer questions, fix bugs and remove spam.
What we do not do
- We do not sell or rent your information.
- We do not use advertising trackers.
Keeping and removing your data
All data that we store is maintained in encrypted databases on encrypted disks and have encryption set on sensitive information at a column level -- having a background in financial software design, security is paramount. We keep account data while your account exists and order records as long as the law requires. To see, correct or delete your information, contact us and we will act on it promptly.
Changes
If this policy changes, the date at the bottom of this page changes with it.
Last updated October 24, 2026.