PRIVACY POLICY
Privacy policy
What quickshop collects, why, who it is shared with, and how long it is kept.
1. Who processes your data
The controller is xKotelek, operator of quickshop. Contact: business@kotelek.dev.
RODO/GDPR - Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data.
2. What is collected when you sign in
Signing in with Discord provides your Discord user id, username, avatar and email address. These are stored so your shops can be linked to an account and so we can contact you about it.
A session record is stored in our database so you stay signed in. Signing out deletes it immediately.
This processing is necessary to provide the service you asked for, under Art. 6(1)(b) RODO/GDPR.
3. What is collected when you sell
Shops, products, prices and API credentials that you create are stored so the Service can function.
For each order we store what was bought, the price, the in-game nickname it was delivered to, the email Stripe collected from the buyer, and whether delivery has happened.
Card details are never sent to or stored by quickshop. Payments happen on Stripe's systems, and Stripe acts as an independent controller for them under its own privacy policy.
4. What is shared
Payment data is shared with Stripe in order to take payments and pay you out.
Order details are made available to the game server that the shop belongs to, so that purchases can be delivered.
Your data is not sold, and is not shared for advertising.
5. How long it is kept
Account and shop data is kept while your account exists. Deleting your account removes it, along with your shops, products, orders and credentials.
quickshop and quickpay share one account, so deleting it from either dashboard erases your data on both, including your quickpay websites, checkout buttons and sales history.
Records that Stripe or tax law require to be retained are kept for the period those rules require, even after account deletion.
6. Your rights
You may request access to your data, correction, deletion, restriction of processing, or portability, and you may object to processing based on legitimate interests.
You can delete your account yourself from the dashboard, which is the fastest route for erasure.
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.