Privacy Policy

Effective date: May 20, 2026
Last updated: May 23, 2026

This Privacy Policy explains how Aimlessdev LTD (“we,” “us,” “our”) collects, uses, discloses, and protects personal information when you use our website and related services.

If you do not agree with this Privacy Policy, do not use the Services.

1. Who We Are

Data controller: Aimlessdev LTD Company number: 16405816 Business address: 10 Norfolk Road, M46 9PX, United Kingdom
Registered office: 10 Norfolk Road, M46 9PX, United Kingdom
Privacy contact: info@aimlessdev.co.uk

2. Information We Collect

We may collect the following categories of information:

• Account information: username, email, Discord account identifiers, profile metadata you provide.
• Order and billing information: transaction IDs, product details, billing country, invoice metadata, payment status.
• Payment information: payment processing details handled by Stripe (we do not store full card numbers).
• Technical data: IP address, browser type, device info, operating system, referring URLs, access timestamps.
• Usage data: pages visited, interactions with storefront or service features, error logs, diagnostics.
• Support data: messages, attachments, and related records when you contact support.

3. How We Collect Information

• Directly from you (account creation, checkout, support requests).
• Automatically through cookies, logs, and similar technologies.
• From third parties (for example Stripe, Discord, infrastructure and anti-fraud providers).

4. Why We Use Information

We use personal information to:

• Provide and operate the Services.
• Process orders, billing, and refunds.
• Authenticate users and link account entitlements.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Communicate about transactions, service updates, and support requests.
• Improve reliability, functionality, and user experience.
• Comply with legal obligations.

5. Legal Bases (EEA/UK, where applicable)

Where GDPR/UK GDPR applies, we process data based on:

• Contract performance.
• Legitimate interests (service security, fraud prevention, improvement).
• Legal obligations.
• Consent (for optional analytics/marketing cookies, where required).

6. Payments and Stripe

We use Stripe as our payment processor. Payment information is processed directly by Stripe under Stripe’s terms and privacy policy. We receive limited payment metadata needed to confirm transactions, handle disputes, and maintain records.

Stripe Privacy Policy: https://stripe.com/privacy

7. Cookies and Similar Technologies

We may use essential and analytics cookies to operate and improve the Services.

• Essential cookies are required for core site functionality.

• Analytics cookies help us understand usage and improve performance.

• Under UK PECR and UK GDPR, we request consent before setting non-essential cookies and similar technologies. You can manage your cookie preferences at any time by clicking the “Manage Cookies” link at the bottom of any page or by calling window.manageCookies() in your browser console.

  8. How We Share Information

We may share information with:

• Service providers and processors (payment processing, hosting, analytics, support tooling, security/fraud tools).
• Professional advisors (legal, accounting) when necessary.
• Government authorities or law enforcement where required by law or to protect rights and safety.
• Successors in a merger, acquisition, restructuring, or asset sale.

We do not sell personal information for money.

9. International Data Transfers

Your information may be processed in countries other than your own. Where legally required for UK personal data, we use appropriate safeguards for cross-border transfers, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to SCCs, adequacy regulations, or another lawful transfer mechanism.

10. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including:

• Account and service records while your account is active.
• Transaction and tax records for required accounting/legal retention periods.
• Security logs and diagnostics for fraud prevention and system integrity.

Retention periods may vary based on legal obligations and dispute requirements.

11. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on your location, you may have rights to:

• Access personal information we hold about you.
• Correct inaccurate information.
• Delete information (subject to legal exceptions).
• Restrict or object to certain processing.
• Request portability of your information.
• Withdraw consent where processing relies on consent.

To exercise rights, contact: info@aimlessdev.co.uk

If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

13. UK-Specific Information

• The UK GDPR and Data Protection Act 2018 apply to our UK data processing activities.
• We act as a data controller for the personal information described in this Policy unless otherwise stated.
• We process personal information in line with the lawful bases listed above and provide data subject rights accordingly.

14. Children’s Privacy

The Services are not directed to children under 13 (or higher age where required by local law). We do not knowingly collect personal information from children below the applicable age threshold.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last updated” date. Material changes may be communicated through additional notice where required.

16. Contact

For privacy questions or requests, contact: info@aimlessdev.co.uk