Xeron Shop Privacy Policy

Version 2026-10-24 · Effective 24/10/2026 (DD/MM/YYYY)

The short version

  • This website has no customer accounts, tracking or advertising, and the public pages set no cookies of their own.
  • Payments and your order data are handled by Ko-fi. I never see your card or PayPal details.
  • I only receive the order information I need to deliver your key, give support and handle refunds.
  • Like any web server, this site processes your IP address and technical request data to deliver and secure the pages.
  • Fonts and the Ko-fi chat button are loaded from external servers (Google Fonts, Ko-fi).
  • You have rights over your data — see section 7.

1. Who is responsible

The controller for this website is Xeron. Contact: dev@xeron.site.

2. Visiting this website

When you open a page, the web server and its reverse proxy process technical data that your browser sends: IP address, date and time, requested URL, browser and device information (user agent) and the referring page. This is necessary to deliver the page and to keep it stable and secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and working website). Log data is only kept as long as needed for these purposes.

3. Cookies

The public pages of this Shop do not set cookies of their own and do not use analytics or advertising tools. Third-party content described below may set its own cookies or similar technologies; see the providers' privacy policies.

4. Orders, payments and key delivery

Purchases are made on Ko-fi. Ko-fi and its payment providers collect and process your payment data, name and e-mail address under their own privacy policies. I receive the order information I need: the product, the order or transaction reference, your e-mail address or Ko-fi name, and the time of the order. I use it to deliver your key, to answer support requests, to process replacements and refunds, to prevent abuse and fraud, and to meet bookkeeping duties.

Legal basis: Art. 6(1)(b) GDPR (performing the contract), Art. 6(1)(c) GDPR (legal obligations such as tax and bookkeeping) and Art. 6(1)(f) GDPR (legitimate interest in preventing fraud and handling claims). I keep order records only as long as needed for these purposes, including statutory retention periods.

5. External services

  • Google Fonts: the fonts of this site are loaded from Google's servers. This transmits your IP address to Google.
  • Ko-fi: the "Support Me" button is loaded from Ko-fi's servers, and every product links to Ko-fi. When you use Ko-fi, your data is processed by Ko-fi under its own privacy policy.
  • Discord and e-mail: if you contact me through these, I receive the information you send (for example your name, message and screenshots) and use it only to answer you. Please hide your full key in screenshots.

6. Sharing of data

I do not sell your data. I only pass it on where it is necessary for the purchase (to Ko-fi and its payment providers), where I am legally required to, or where you ask me to.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You can also withdraw a given consent at any time. To exercise these rights, write to dev@xeron.site. You also have the right to lodge a complaint with a data protection supervisory authority.

8. Changes

I may update this Privacy Policy when the website or the law changes. The version and effective date are shown at the top of this page.