Privacy policy

Who is responsible

Victor (KoDev), Brazil, is the controller of your data. Contact for anything about privacy: [email protected].

What I collect

Account: when you sign in with Discord, I receive your Discord ID, username, display name, avatar and, if Discord shares it, your email. If you sign up with email, I store your email and a securely hashed password. I never receive your Discord password or messages.

Requests: the project details, budget, files and preferred times you send in a request, plus the quote and the messages about it.

Payments: for PayPal payments I receive the payer email, transaction ID and amount. Card payments are processed by Stripe and Pix by your bank; I don't store card numbers.

Discord server: when you join the KO studios server for your ticket, the bot records your Discord ID and when you joined, to open your project chat.

Why I use it

To create your account, answer your requests, send quotes, open your project chat, confirm payments and deliver files (performance of a contract).

To prevent fraud and abuse and to keep records required by law (legitimate interest and legal obligation).

I don't sell your data, and I don't use it for advertising.

Who processes it

Supabase (database, login and file storage), Square Cloud (hosting), Cloudflare (network and security), Discord (login and chat), PayPal and Stripe (payments), and Medal.tv (embedded project videos). Some of them store data outside Brazil, under their own safeguards for international transfers.

Cookies and local storage

The site only uses what it needs to work: a login session cookie, and small browser storage entries that remember things like whether the intro animation already played or which language you picked. There are no analytics or advertising cookies.

Visits are counted without cookies: for each page view the site records the page, the website you came from, your country and whether you're on a phone or a computer. Your IP address and browser are only used to make an anonymous id that changes every day, and they aren't stored. If your browser sends Do Not Track or Global Privacy Control, nothing is counted. These records are deleted after 13 months.

How long I keep it

Account data is kept while your account exists. Requests and payment records are kept for up to 5 years for tax and dispute purposes, then deleted. Everything else is deleted when you delete your account or ask me to.

Your rights

You can ask to access, correct, export or delete your data, and to withdraw consent, by emailing [email protected]. I'll answer within 15 days.

You can also complain to Brazil's data protection authority (ANPD) or, in the EU, to your local authority.

Children

You must be at least 13 to create an account. If you're under 18, you need a parent or guardian's permission to place a paid order.

Changes

If this policy changes in a meaningful way, I'll update the date below and post a notice on Discord.