Privacy Policy
We collect the minimum needed to run your account, sell you packs, and - if you sell - pay you. This explains what we hold, why, and your rights under the GDPR.
What we collect
Your account identity (name and email, and whether the email is verified) via our authentication provider; your purchase records (linked to your account, including the items, price and Stripe reference); and the billing and location data Stripe needs to take payment and calculate tax. Payment card details are handled entirely by Stripe - we never see or store them.
If you sell
Creators also have a public profile - handle, display name, and anything you add to it (a bio, profile image and links) - plus a connected Stripe account for payouts and earnings/payout records. The profile is public by design; the payout data is not. This lets us credit your listings and pay your share of each sale.
Why we hold it
To run your account and fulfil your orders and downloads (contract); to operate seller payouts (contract); to meet tax and accounting obligations (legal obligation); to prevent fraud and keep the marketplace secure (legitimate interest); and to send new-character emails only where you have opted in (consent).
Processors
We use Stripe (payments, payouts & tax), Neon Auth (identity), a database and object-storage/CDN provider (app data & file hosting), a transactional/marketing email provider (account and opt-in emails), and privacy-friendly analytics. Each processes data on our behalf under a data-processing agreement; some operate outside the EEA under appropriate safeguards.
Retention
We keep account and order data for as long as your account is active and as long as tax and accounting law requires, then delete or anonymise it.
Your rights
You may request access, correction, deletion, or a copy of your data, and you can withdraw marketing consent at any time via the unsubscribe link or by emailing us. You may also complain to your local data protection authority.
Contact
Privacy requests: privacy@redroster.ai.