Privacy Policy
Privacy Policy
This Privacy Policy explains what personal data Badgyver collects when you use badgyver.com and our plugins, why we collect it, who we share it with and the rights you have over it. We collect only what we need to run the store, deliver your products and protect your licences. We never sell your personal data, and we do not use advertising or tracking cookies.
At a glance
- Only what we needYour Discord identity, your orders and your licence details.
- No selling, no trackingNo data sales, no advertising, no analytics cookies.
- Payments stay with PayPalWe never see or store your card details.
- You are in controlAccess, correct, export or delete your data at any time.
01Who is responsible
- Controller
- Badgyver
- Country
- Spain
- Website
- badgyver.com
- Privacy contact
- Discord ticket channel
Badgyver is the data controller for the personal data described in this policy, which is processed in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
02The data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Discord user ID, username, avatar and verified email address. | Discord, when you sign in. |
| Orders | Products bought or downloaded, prices, taxes, country, dates, order and invoice numbers. | You, at checkout. |
| Payments | Payment confirmation, transaction reference and the email of the payer. Never your card details. | PayPal. |
| Licences | Community and server names, server addresses, server identifiers, and the time and IP address of each licence check. | You, in your account, and our plugins. |
| Linked marketplace | Your username and ID on a linked marketplace, and which of our products you bought there. | RogueDepot, only if you link your account. |
| Support | The messages and files you send us. | You. |
| Technical | IP address, browser type and request logs kept for security. | Your device. |
03Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Creating your account and letting you sign in. | Performance of a contract. |
| Processing orders, delivering downloads and providing updates. | Performance of a contract. |
| Issuing, verifying and protecting plugin licences. | Performance of a contract and our legitimate interest in preventing unauthorised use. |
| Linking a marketplace account to deliver its licences. | Your request, as part of the contract. |
| Answering support requests. | Performance of a contract and legitimate interest. |
| Keeping invoices and order records. | Legal obligation (tax and accounting law). |
| Keeping the site secure and preventing fraud and abuse. | Legitimate interest. |
| Announcing new products on our Discord server. | Legitimate interest. No personal data is used. |
05International transfers
Some of these providers, such as Discord, PayPal, Cloudflare and Google (YouTube), may process data outside the European Economic Area, including in the United States. In those cases the transfer is protected by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission’s Standard Contractual Clauses.
06How long we keep it
- Account data: while your account exists. When you ask us to delete it, it is erased, except for what we must keep by law.
- Orders and invoices: for the periods required by Spanish tax and commercial law, currently up to six years.
- Licence data: while the licence exists. For each server we keep only its latest check, not a history.
- Support messages: as long as needed to resolve your request, and up to two years after.
- Security logs: only for the limited period our hosting provider keeps them, and never for profiling.
07Your rights
You have the right to:
- access the personal data we hold about you;
- rectify data that is inaccurate or incomplete;
- erase your data, including deleting your account;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, open a ticket in our Discord ticket channel from the Discord account you sign in with, so we can confirm the request is yours. If you can no longer use Discord, use the contact details in our Legal Notice. We answer within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or the data protection authority of your country.
08Security
The site is served only over encrypted connections (HTTPS). Server secrets used by plugins are stored hashed, never in plain text; access to customer data is restricted to the site administrator; and payments are handled entirely by PayPal. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you and the authorities of any breach as the law requires.
09Children
The site is not intended for children. You must be at least 16 years old to create an account, and we do not knowingly collect personal data from anyone younger. If you believe a child has given us their data, contact us and we will delete it.
10Cookies
We use only the cookies needed for the site to work, such as keeping you signed in and remembering your cart. The full list is in our Cookie Policy.
11Changes to this policy
We will update this policy when our services or the law change. The date at the top of this page shows the latest version, and important changes will be announced on the site.
12Contact
Questions about your privacy or your data:
