Privacy Policy

Controller

Jessica Kemper, Schmiedepfad 8, 51545 Hamm, Germany. Email: dezzydi96@icloud.com, phone: 0238151491.

Data we collect

• Discord account data when you log in with Discord: your Discord ID, username, display name, avatar and email address, and whether you are a member of our Discord server.
• Account data we create: coin balance, coin history, plan and billing status, orders, the names and timestamps of your exports, and a list of the garments you edited recently (not the artwork itself).
• Images you upload into the editor. They are stored on our server and shared with our team in a private channel on our Discord server so we can help you and add popular artwork to the library.
• Payment data. Card payments are processed by Stripe. We never see or store your full card details; we receive the payment status, amount and a customer reference.
• Data you send with the withdrawal form or in a support ticket: name, address, email, order number, products and your message.
• Technical data needed to run the site: IP address and request data in our server logs, and your designs as drafts in your own browser (local storage).

Purpose

We use this data to log you in, run the editor, build and deliver your exports, manage coins and plans, collect payments, provide support, prevent abuse and meet tax and legal obligations.

Legal basis

Performance of the contract and steps before it (Art. 6 (1)(b) GDPR), legal obligations such as tax retention (Art. 6 (1)(c) GDPR), our legitimate interest in a secure and working service and in sharing uploads with our team (Art. 6 (1)(f) GDPR) and, where required, your consent (Art. 6 (1)(a) GDPR).

Cookies and local storage

We only use essential cookies: one keeps you logged in (bd_session), one protects the Discord login against forgery (bd_oauth, ten minutes) and one remembers your language (lang). Your editor drafts are saved in your browser's local storage and never leave your device unless you export. We do not use tracking, advertising or analytics cookies.

Service providers

• Hosting: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Our server runs in the EU.
• Login and community: Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA. Discord is certified under the EU-U.S. Data Privacy Framework. Avatars are loaded from Discord's servers.
• Payments: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe may process data in the USA under the EU-U.S. Data Privacy Framework and standard contractual clauses.
• Fonts in the editor are loaded from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address when the editor opens.
• Email: messages from the withdrawal form are sent through Google Gmail (Google Ireland Limited).

Retention

Order and invoice data are kept for the statutory retention periods (up to ten years under German tax law). Account data is kept while you use the service and deleted on request unless the law requires us to keep it. Support tickets and their transcripts are kept as long as needed to handle your request and possible claims. Uploads are deleted on request.

Your rights

You may request access, rectification, erasure, restriction of processing or data portability, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. Contact: dezzydi96@icloud.com.

You may also lodge a complaint with a supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf.