How Sweatproof collects and uses personal data for everyone on the platform — subscribers, free-trial users, whitelabel owners, and their customers. Stored in the UK under UK GDPR. See also our Terms of Service.
Sweatproof ("we", "us", "our") operates the Service and is based in the United Kingdom. We are the data controller for the personal data described in this policy and we process it in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
For any privacy request or question, contact us at mason@sweatproof.gg.
This policy applies to everyone whose data we handle: visitors, subscribers, free-trial users, whitelabel store owners ("owners"), and the customers who buy through a whitelabel store. Where an owner runs a store, we are the controller of the underlying service data; owners are separately responsible for their own additional handling of their customers.
Discord account data: your Discord user ID, username, display name, and avatar, and — where relevant — the list of Discord servers you are a member of or own/administer (used to show you the right stores and to verify server ownership).
Contact & billing details: the email address and billing name and address you provide at checkout.
Payment data: payments are processed by Stripe. We do not store your full card number. We store your Stripe customer ID, and card metadata such as brand, last four digits, and expiry, together with invoice, payment, and payout records.
Subscription, trial & purchase data: your plan, subscription and licence status, billing dates, free-trial usage and session limits, the store (Discord server) a purchase was made for, and related lifecycle events.
Whitelabel owner data: your Stripe Connect account and onboarding status, your connected Discord server, and your Discord bot credentials (client ID, client secret, and bot token). Secrets are stored encrypted at rest.
Service usage data: session records and statistics, bot and command usage, party-scan data captured during gameplay (which can include in-game player names and lobby screenshots), queue activity, timestamps, and system/action logs of significant events.
Support & appeals: the support requests or tickets you open, their messages, and any files you attach.
Terms acceptances: a record when you accept our terms, which may include a timestamp, your user agent, and IP address.
Technical data: IP address, approximate location, device and browser information, and cookies or similar identifiers needed to keep you signed in and to keep the Service secure.
To provide the Service and your account, take payments, deliver access, run stores, and pay owners — necessary to perform our contract with you.
To operate, secure, and improve the platform, prevent fraud and abuse (including free-trial abuse and payment fraud), handle chargebacks and disputes, and enforce our terms — our legitimate interests in running a safe, working service.
To meet legal, tax, accounting, and regulatory obligations — necessary for compliance with a legal obligation.
For anything that legally requires it, we rely on your consent, which you can withdraw at any time.
Stripe — to process payments, run Stripe Connect payouts to owners, and manage disputes.
Discord — the platform the Service runs on; we interact with Discord's API to sign you in and operate bots.
Supabase — our database and file-storage provider, used to host the data described above.
Whitelabel owners — an owner can see limited information about the customers who buy through their store (such as Discord name and ID, plan, purchase and expiry dates, and their own payout figures). Owners do not receive card details, email addresses, or your billing address.
We may also share data where required by law, to enforce our terms, to prevent fraud or harm, or as part of a business transfer such as a merger, sale, or restructuring. We do not sell your personal data.
Your data is stored and processed in the United Kingdom (and, where a provider processes data outside the UK, under appropriate safeguards required by UK GDPR).
We keep personal data only as long as needed for the purposes above — for the life of your account and then for as long as required to meet legal, tax, accounting, fraud-prevention, and dispute obligations — after which it is deleted or anonymised.
We use technical and organisational measures to protect your data, including encryption of stored secrets (such as owners' bot credentials), access controls, and processing over secure connections. No system is perfectly secure, but we take reasonable steps to protect your information.
Under UK GDPR you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where we rely on it. These rights may be subject to legal limits, identity verification, security requirements, and retention obligations. To exercise any of them, email mason@sweatproof.gg and we will respond within the time the law allows.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk — though we'd appreciate the chance to put things right first.
We use a small number of strictly necessary cookies and similar technologies to keep you signed in and to keep the Service secure. We do not use them for advertising.
The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact mason@sweatproof.gg and we will remove it.
We may update this policy from time to time; the "last updated" date above shows the current version, and material changes take effect when posted here.
For any privacy request or question — including access, deletion, or a data-protection concern — email mason@sweatproof.gg.