Privacy Policy
Effective date: 4 June 2026
1. Scope and acceptance
This Privacy Policy governs the website at k4ryuu.com(the "Site"), operated by the individual publishing under the handle K4ryuu(the "Operator"). By accessing or using the Site, you (the "User") acknowledge that you have read and accept this Policy in full. If you do not accept it, you must not use the Site.
2. Data minimisation
The Site is engineered to collect the minimum data technically required to function. The Operator maintains no user accounts, operates no database of personal data, and sets no cookies of its own. The categories of data described below are the only categories processed.
3. Payments
All payments are processed exclusively by Stripe on infrastructure hosted and controlled by Stripe. The Operator does not receive, view, transmit, or store your card number, banking credentials, or any payment instrument at any point. Stripe independently collects and processes your payment data and email address as the controller of that data, subject to its own policies. The User is responsible for reviewing Stripe's terms before submitting any payment.
4. Public supporter name
The donation flow contains a single optional field for a display name. Any value submitted in that field is published on the Site as a supporter credit, visible to the public. Submission of that field is entirely voluntary and constitutes your express consent to publication. If the field is left blank, the entry is published as "Anonymous". The User must not submit a name they are not entitled to use.
5. Technical data
The User's IP address may be processed transiently and in memory for the sole purpose of rate-limiting the donation endpoint against abuse. It is not written to disk, logged, or retained beyond the lifetime of the request.
6. Analytics
The Site uses Vercel Web Analytics and Vercel Speed Insights. These services are cookieless, report only aggregate metrics, and do not identify the User personally or track the User across other websites.
7. Sub-processors
The Operator relies on the following independent processors, each governed by its own privacy policy: Stripe (payment processing) and Vercel (hosting and analytics). The User acknowledges that data handled by these processors is subject to their respective terms.
8. Retention
The Site itself stores no personal data. Donation records are retained by Stripe under Stripe's retention schedule. Publicly displayed supporter names are read live from Stripe at the time a page is generated and are not stored by the Site. Analytics data is aggregate and contains no personal identifiers.
9. Legal basis
Where the GDPR applies, processing is carried out on the basis of the User's consent (the optional display name) and the Operator's legitimate interest in operating and securing the Site (rate-limiting and aggregate analytics).
10. Donations are final
Donations are voluntary gifts and are not purchases. No goods, services, subscription, entitlement, or obligation of any kind is provided, promised, or implied in exchange for a donation. All donations are final and non-refundable to the maximum extent permitted by applicable law.
11. No warranty
The Site and all content are provided "as is" and "as available", without warranty of any kind, express or implied. To the maximum extent permitted by applicable law, the Operator excludes all liability for any loss or damage arising from use of, or inability to use, the Site.
12. Your rights
Where the GDPR applies, the User may exercise the rights of access, rectification, erasure, restriction, and objection. Requests concerning payment data must be directed to Stripe as the controller of that data. Requests to remove a published supporter name may be made through the channel set out below.
13. Contact
Privacy and data requests may be submitted through the Discord. Requests relating to payment data must be directed to Stripe.
14. Amendments
The Operator may revise this Policy at any time and without prior notice. Continued use of the Site after a revision takes effect constitutes acceptance of the revised Policy. The effective date above reflects the current version.