Privacy

Who runs the site

The site is run by me, [your full legal name, or your trading name], from [your postal address]. Under UK data protection law (the UK GDPR and the Data Protection Act 2018) that makes me the controller of what the site keeps about you.

For anything on this page, including asking for a copy of your data or having it deleted, email me at [contact email]. [Your ICO registration number once you've paid the data protection fee, or take this line out if you're exempt]

What the site keeps, and why

The site only keeps what it needs to run your account, your membership and your downloads, and to keep them safe. Here's all of it.

• Your email address, if you join by paying or sign in by email. Your account is made on it after you pay, and it's where your sign in links, the welcome email, delete codes and the link to keep your account go. It isn't public, and there's no mailing list, so you won't get newsletters or marketing from it.
• Your Discord id, if you sign in with Discord or link it. The site only asks Discord for your basic profile (no email), keeps your Discord id so it knows it's you next time and can give you your tier's role in my Discord server, and uses your Discord avatar as your picture. Your Discord name isn't kept.
• Your profile: the handle you pick, your bio (up to 160 characters), your picture and the date your account was made. These are public on your profile page. Your tier and how long you've been a member show there too, unless you switch that off on your account page.
• Your membership: which tier, where it came from (the site's checkout, Patreon, or one I've given you by hand), whether it's active, cancelled, refunded or ended, when your paid month runs out, and the payment provider's own references for your subscription and for you as their customer, so Manage payment opens the right page. The site never sees your card or bank details, the payment provider takes those.
• Each checkout you start: the email and tier you put in, and when you paid. These are deleted after 7 days. The site also keeps the id, type and time of each payment message it has acted on, so the same message can't be acted on twice. Nothing else from the payment is kept with them.
• Your Patreon link, if you link it: your Patreon user id, your membership id on my Patreon, your tier, and the date your pledge started (for your member since date). Only your membership to me is kept, and the site doesn't ask Patreon for your email.
• Your linked PCs: the PC name and operating system the Hub sends when you link it, when you linked it and when the Hub last checked in. Each linked PC gets its own random secret and the site only keeps a scrambled copy of it. Nothing is read off your hardware for this.
• What you've sent to install: which items went to which PC, when, and whether the Hub installed them.
• A record of every download link: who it was made for, which PC, which item, whether it came from the site, the Hub or Content Manager, when, and how many times it was used. These are kept for 90 days, so a link that's been passed around can be traced back. Free apps installed with Content Manager aren't tied to anyone.
• Your sessions. When you sign in your browser gets a random token and the site keeps a scrambled copy of it, with when it runs out. Sign in links, delete codes and PC link codes are kept the same way.
• Your IP address, for security. It's used to limit how many sign in emails, checkouts and free downloads can be asked for from one address, so nobody can spam them. Those records hold your address (and the email, for sign in emails) and are deleted after a day.
• A log of your Discord role changes: your account's id, which tier role, added or removed, why and when. It's there so I can sort out a role that's gone wrong. It holds no Discord id or email, so once your account is deleted it points at nobody. If your roles can't be taken off when you delete your account (Discord being down, say), your Discord id waits in a list until they are, then it's removed.

Community presets

Presets you share from my apps go through a separate backend and are stored with Supabase. With each one it keeps the preset itself, the author name you put on it, which app it's for, and a key made from an id the app reads off your PC. The key is scrambled so it can't be turned back into that id, and it's what lets you update or delete your own presets. Votes and reports on presets are kept against the same key.

Your IP address is used there for a short time to stop spam, and isn't stored with any of it. Presets aren't tied to your site account, so deleting your account doesn't touch them. You can delete your own from the app, or ask me to.

The legal reasons for using it

• To run your account, your membership and your downloads, because you've asked me to (a contract, in data protection terms). Your email, Discord, Patreon, profile, linked PCs, installs and sessions are all here.
• To keep the site safe and stop abuse, because I've got a legitimate interest in doing that. That covers the IP limits, the download records and the Discord role log, each kept only as long as the list below says.
• Your payment records are kept by the payment provider, under its own legal duties like tax.
• Nothing on the site relies on your consent today, because there's no tracking to ask about. If that ever changes, the site will ask you first.

Cookies and your browser

The site only sets the cookies it needs to work. All of them are locked to garryroberts.org, can't be read by the page's own scripts, and are only sent over a secure connection.

• __Host-gr_session keeps you signed in. It lasts 30 days and gets pushed on while you keep using the site. Signing out removes it.
• __Host-gr_oauth holds your place for up to 10 minutes while you're over at Discord signing in or linking it.
• __Host-gr_patreon does the same for up to 10 minutes while you link Patreon.
• __Host-gr_checkout ties the trip back from paying to the browser you started in, so only you get signed in by it. It lasts 2 hours.

There are no advertising cookies, no tracking pixels and no analytics on the site. If I ever add analytics it'll be listed here first, and anything that needs your OK will ask for it.

Until accounts go live, the account pages are a preview that keeps a pretend account in your browser's own storage. It never leaves your browser, and clearing the site's data wipes it.

Who else sees it

A few companies run parts of the site for me. Each one only gets what it needs for its part.

• Vercel hosts the site. It sees your IP address and the pages you ask for when it serves them.
• Cloudflare runs the backend (Workers), keeps your account in its database (D1), holds the mod files (R2) and sends the site's emails (Email Sending). It holds everything in the list above, and sees your email address and what's in each email it sends.
• Supabase stores the community presets, and nothing from your account.
• The payment provider, [Stripe through Stripe Managed Payments, or Tebex, keep whichever is live]. The site sends it your email and the tier you picked. It takes your card or other payment details itself, sells you the membership as the merchant of record, and handles the tax, receipts and refunds. It's in charge of that payment data under its own privacy policy, [link to the provider's privacy policy].
• Discord, if you sign in with it or link it. The site's bot adds and removes your tier's role in my server, so Discord knows your tier there. Discord avatars load straight from Discord, so Discord sees your IP address when your browser fetches one.
• Patreon, if you link it. The site reads your membership to me from Patreon, and Patreon tells the site when it changes.

I don't sell your data, and nobody gets it for advertising.

Some of these companies store or handle data outside the UK, mostly in the US. [How each transfer is covered, for example each provider's data processing terms with the UK International Data Transfer Addendum, or the UK US data bridge, once you've checked them]

How long it's kept

• Your account and everything on it: until you delete it, then 7 days, then it's gone (see below).
• Old memberships stay on your account record until you delete the account.
• Sessions: 30 days from when you signed in, pushed on while you keep using the site. Signing out ends yours straight away.
• Sign in links: 15 minutes (24 hours for the one in the welcome email), cleared a day after they run out.
• Delete codes and PC link codes: 10 minutes. A PC that starts linking but never finishes is dropped after a day.
• Checkouts: 7 days.
• IP limit records: a day.
• Download records: 90 days.
• Discord role log: a year.
• Payment message ids: [how long to keep these, the code doesn't clear them yet].
• Deleted data can sit in Cloudflare's database backups for up to [the backup window on your D1 plan] before it's gone from there too.
• The payment provider keeps its own records for as long as the law asks it to.
• Community presets: until you delete them from the app, or I take them down.

Deleting your account

You can delete your account from your account page. First you prove it's you, with a 6 digit code sent to your email, or by signing in with Discord again. Then you've got 7 days to change your mind.

Straight away your site membership is cancelled with the payment provider so you won't be charged again (that isn't a refund), your Patreon is unlinked (your pledge carries on until you change it on Patreon), and you get an email with the date and a link to keep your account. You stay signed in, and Keep my account on your account page works too. Keeping it doesn't bring a cancelled membership back, you'd join again for that.

After 7 days your account and everything on it is deleted: your profile, email, Discord and Patreon links, linked PCs, install queue, memberships and sessions. Your tier's role comes off in my Discord server. Download records lose the link to you and run out on their 90 days, and the role log keeps its lines with nothing pointing at you.

Your rights

Under UK data protection law you can ask me for a copy of what the site keeps about you, have it corrected, have it deleted, ask me to limit or stop using it, object to how I use it, and get it in a form you can take somewhere else.

A lot of it you can do yourself on your account page: change your handle and bio, hide your membership from your profile, unlink PCs, Discord and Patreon, and delete your account. For anything else email [contact email]. I'll answer within a month, and it's free.

If you're unhappy with how I've handled your data, tell me first and I'll sort it out. You can also complain to the Information Commissioner's Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

You need to be [13] or over to have an account. [What you want to say about members under 18, for example that they need a parent's OK to pay]

Changes to this page

If what the site keeps, or who sees it, changes, this page changes first and the date at the top moves. If it's a change that matters to members, I'll [say how you'll tell them, by email or on Discord].