Privacy Policy

1. Introduction

Your privacy matters to us. This Privacy Policy explains how wbio.lol (the "Service") collects, uses, and protects your information when you use our platform.

2. Information We Collect

We collect the following types of information:

• Account Data: Email address, username, and authentication data (via Discord OAuth or email signup)
• Profile Data: Information you choose to display on your profile — avatar, bio, social links, custom badges, background settings, and music preferences
• Usage Data: Page views, profile view counts, and feature usage analytics
• Payment Data: Processed by Stripe and SellAuth — we do not store your credit card details. We store purchase records (key type, amount, user ID) for order fulfillment
• Integration Data: If you connect Spotify, Discord, or Last.fm, we access limited data from those services to power features (e.g., now playing, Discord presence)

3. How We Use Your Information

• To provide and operate the Service
• To display your public profile to visitors
• To process purchases and deliver license keys
• To track profile view counts and badge progress
• To improve the Service and develop new features
• To prevent abuse and enforce our Terms of Service

4. Data Storage

Your data is stored securely on encrypted cloud infrastructure. We use industry-standard security practices including encrypted connections (HTTPS/TLS) and row-level security policies. Authentication tokens are stored locally in your browser.

5. Third-Party Services

We integrate with the following third-party services:

• Stripe — Payment processing
• SellAuth — Crypto payment processing
• Spotify API — Music integration (optional)
• Discord API — Authentication and presence (optional)
• Last.fm API — Listening history (optional)

Each service has its own privacy policy. We recommend reviewing them for details on how they handle your data.

6. Data Sharing

We do not sell your personal data. We only share data with third-party services as necessary to operate the platform (e.g., Stripe for payments). Profile information you make public (username, bio, avatar, badges) is viewable by anyone who visits your profile URL.

7. Cookies & Local Storage

We use browser local storage and cookies for authentication sessions and user preferences. We do not use third-party tracking cookies for advertising purposes.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect third-party integrations at any time

To exercise these rights, contact us via our Discord server. Account deletion requests will be processed within 30 days.

9. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain it (e.g., payment records for tax purposes).

10. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect data from children under 13. If we become aware of such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via Discord or on-site announcements. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, reach out via our Discord server.