Privacy policy

This policy covers the RLPlugins website, launcher, managed plugin delivery, developer tools, and support channels. RLPlugins operates the service. Privacy requests can be sent to [email protected].

Account records include your Discord identifier, username, avatar reference, roles, and account status. Commerce records include order identifiers, purchased products, price, currency, provider status, entitlement dates, refunds, and disputes. Payment providers process payment credentials; RLPlugins does not need to store raw card details.

The launcher and security systems can process session, device, IP address, client version, entitlement, manifest, and security-event data needed to authenticate requests and deliver the permitted build. Support and developer tools process the messages, files, source submissions, review history, payout details, and profile information you choose to provide.

A first-party security cookie recognises browser reuse across website sign-ins so staff can review possible alternate accounts. It expires after 180 days. We store a protected hash of the browser identifier with verified Discord sign-ins, subject to security-record retention. A shared browser or network does not by itself prove that accounts belong to the same person.

We use this information to sign you in, complete and reconcile orders, grant access, deliver compatible releases, prevent abuse, review submitted plugins, support users, pay developers, keep audit records, and meet legal or accounting obligations. We do not sell personal information.

Information is shared only where needed with infrastructure, authentication, payment, communication, fraud-prevention, and professional service providers. Discord receives authentication and community interactions. A selected payment provider receives checkout data. Developers can see privacy-limited sale records for their own products, but not raw payment credentials or unrelated account data. We may disclose information where law requires it or to protect the service and its users.

We keep data only as long as needed for the purpose collected. Active account and entitlement records remain while the service is provided. Financial, audit, fraud, dispute, and security records can be retained longer where necessary for legal obligations or to resolve claims. Source submissions and review records remain while a product is managed and for a reasonable archive period.

You can ask for access, correction, or deletion of personal information by contacting support. Some records cannot be deleted immediately when they are required for accounting, security, disputes, or legal compliance. You can disconnect by signing out and can stop optional support interactions at any time. Rights vary by location and we will apply the rights available to you.

We use access controls, signed delivery, scoped operator permissions, encryption in transit, and audit records to protect the service. No system is risk-free. Providers can process information in countries other than your own, subject to their safeguards and applicable law.

We may update this policy as the product or legal requirements change. The date at the top identifies the current version. Material changes will be communicated through the site or the account channel when appropriate.