Privacy Policy
1. Controller
Yeougui
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
USt-IdNr.: DE313247736
Privacy contact: shop@yeougui.com
Imprint
Payments and SubscribeStar account data are primarily processed by SubscribeStar under their own privacy notice. We only receive limited profile/subscription signals via their OAuth/API when you connect or log in.
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Account identifiers | Internal user id; Discord or SubscribeStar subject id; display name; email when SubscribeStar provides it for login matching | You / OAuth providers |
| Entitlements | Subscription tier / price snapshot used for Hub access | SubscribeStar GraphQL (read-only) |
| Love Counter votes | Opaque voter id (HMAC of Discord id: not the raw snowflake in the session cookie), character choice, timestamps, cooldowns | You / Discord login |
| Hub activity | Likes, favorites, tag suggestions, last seen | You |
| Technical | Session cookies (signed JWTs), OAuth state cookies, IP for rate limits/security logs, approximate browser metadata | Your device / our servers |
We do not store SubscribeStar access or refresh tokens after the entitlement check. We do not process card numbers on the Services.
3. Purposes and legal bases (GDPR)
- Provide the Services (login, voting limits, Hub gallery access): Art. 6(1)(b) contract / steps prior to contract.
- Security, abuse prevention, rate limiting: Art. 6(1)(f) legitimate interests (keeping the Services safe and available).
- Legal compliance (responding to lawful requests): Art. 6(1)(c).
- Optional communications you initiate by email: Art. 6(1)(b) or (f), as applicable.
Where we rely on legitimate interests, you may object under Art. 21 GDPR (see Rights).
4. Cookies
We use strictly necessary cookies/session storage for authentication and OAuth CSRF protection (love_sub, hub session, OAuth state, and similar). These are required to operate login and are not used for third-party advertising. No non-essential analytics cookies are required to browse the public Love Counter.
5. Recipients and processors
- Hosting / VPS and CDN providers that run or deliver the Services.
- Discord and SubscribeStar when you choose to authenticate with them.
- Storage/CDN vendors used for reward media (e.g. object storage): content delivery, not marketing profiles.
- Authorities when legally required.
6. International transfers
Some providers (including Discord and SubscribeStar, US-based) may process data outside the EEA/UK. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s published transfer mechanism, plus your intentional use of those login services.
7. Retention
- Session cookies: short-lived (hours), then expire.
- Account / identity / tier records: while you use the Hub, then deleted or anonymised on verified deletion request where feasible.
- Vote tallies: kept for contest integrity and historical winners; voter linkage minimised (opaque ids).
- Security logs: typically up to 90 days unless needed longer for an incident.
8. Your rights (EU/EEA/UK)
Subject to law, you may request:
- Access, rectification, erasure
- Restriction or objection to processing
- Data portability (for data you provided)
- Withdrawal of consent where processing was consent-based
Email shop@yeougui.com. We may need to verify control of the linked Discord/SubscribeStar account. You may lodge a complaint with your local supervisory authority (e.g. your EU member state DPA).
9. Children
Services are for adults (18+). We do not knowingly collect data from children. If you believe a minor used the Services, contact us to delete related data.
10. Changes
We may update this Policy; the effective date will change. Material changes will be posted on this page.
11. Contact
shop@yeougui.com · c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany · Imprint