Privacy Policy

• Account data such as email address, password hash, account status, and verification timestamps.
• Profile and billing data such as name, address, country, tax ID, and optional Discord handle.
• Checkout and invoice data such as selected tier, amount, currency, payment status, invoice number, and invoice PDF records.
• Legal acceptance records such as accepted terms and privacy versions, timestamps, source IPs, user agents, and immediate-delivery consent logs.
• Download-security data such as release requested, timestamp, IP address, user agent, and issuance outcome.
• Support and security records such as password-reset requests, verification-email requests, rate-limit entries, and relevant audit logs.

• To create and secure customer accounts.
• To verify email ownership and allow password recovery.
• To process payments, generate invoices, and maintain accounting records.
• To deliver official binary builds through controlled hosted download links.
• To document legal acknowledgements, immediate-delivery consent, and compliance decisions.
• To prevent abuse, fraud, brute-force login attempts, and unauthorized downloads.
• To administer optional supporter benefits such as Discord roles or sponsor listings.

Most data is provided directly by you through the portal or checkout. Payment and billing details may also be received from payment providers such as Stripe after checkout completion.

The portal may use third-party providers for hosting, email delivery, payment processing, storage, and infrastructure. Based on the current deployment setup, this may include services such as Render, PostgreSQL or SQLite database hosting, Cloudflare R2 object storage, SMTP or transactional email providers, and Stripe.

We share personal data with those providers only to the extent reasonably necessary to operate the portal, process payments, deliver downloads, send transactional emails, maintain records, or comply with legal obligations.

When you report a problem, reports about LichtFeld Studio and your later replies are published to a public GitHub issue, while reports about this website and their later replies go to a private GitHub tracker, without your name or email address. The portal separately keeps your email address and IP address with each report or reply in private records for 365 days, to investigate abuse and defend legal claims. These private records are kept even if you delete your account and are then automatically erased.

This portal uses technical cookies and similar mechanisms that are necessary for login sessions, CSRF protection, and secure operation. It is not intended to rely on advertising or behavioral tracking cookies.

We use access controls, password hashing, rate limiting, and signed download links to protect accounts and private binary delivery. No security measure is perfect, and transmission or storage risks cannot be eliminated completely.

We retain account, billing, invoice, and security records for as long as needed to operate the service, document transactions, enforce the portal terms, resolve disputes, and comply with tax, accounting, security, or other legal obligations.

Some records may remain in backups or archived logs for a limited period after deletion from active systems.

Depending on the laws that apply to you, you may have rights to request access, correction, deletion, restriction, objection, or portability of your personal data.

To exercise those rights, contact support@lichtfeld.io. We may need to verify your identity before acting on a request.

Depending on the infrastructure and payment providers used, personal data may be processed in countries outside your home jurisdiction. Where required, we rely on the provider's contractual or statutory transfer mechanisms.

We may update this privacy policy as the portal or provider stack changes. Material changes should be posted on this page before they take effect. The version and effective date shown on this page identify the current published text.