We collect only the information we need to operate the storefront, deliver your purchases, prevent fraud, and support you. We collect information in the following ways:

Account Information (Discord Sign-In)

• No Usernames or Passwords: Euphoric does not offer username-and-password accounts. You sign in exclusively through Discord's OAuth2 authorization. We never see, receive, or store your Discord password, and we do not create or store a separate Euphoric username or password.

• Information Received From Discord: When you authorize Euphoric, Discord shares only the information covered by the "identify" and "email" permissions: your Discord user ID, username, avatar, and the email address associated with your Discord account. We do not request access to your Discord servers, messages, friends list, or any other Discord data.

• Session Token: After you sign in, our servers issue a session token that your browser stores so that you stay signed in (see Section 6). The token is used only to authenticate your requests to the Services.

Order and Checkout Information

• Checkout Email: The email address you enter at checkout, which may be different from the email address on your Discord account.

• Order Records: For each order we create an invoice that records the invoice ID, the products, variants, quantities, and prices, the subtotal, any discount, and the total, the order status, the dates the order was created and completed, the Discord account linked to the purchase, any coupon code or referral code applied, the payment method selected, the reference identifiers issued by the payment processor (such as a checkout session ID or tracking ID), and the license keys delivered to you.

• IP Address: The IP address from which the order was placed, which is recorded with the invoice.

• Bot Protection: Checkout is protected by Cloudflare Turnstile, which evaluates signals from your browser and device to confirm that you are not an automated program and returns a verification result to us.

Payment Information

• Card, Mobile Wallet, Cash App Pay, and Pix Payments: These payments are processed by Stripe. Card numbers and other payment credentials are entered directly into Stripe's secure payment form and are sent to Stripe, not to Euphoric. We never receive or store your full card number, security code, or payment account credentials.

• Billing Details: For Stripe payments, you provide your full name and billing address (country, address lines, city, and postal code), which are submitted to Stripe to process your payment. We may receive limited transaction information from Stripe, such as the payment status, payment method type, amount, currency, and the billing details associated with the transaction.

• Cryptocurrency Payments: These payments are processed by OxaPay. We record the coin and network you select, the deposit address and amount issued for your order, the payment expiry time and, once you pay, the blockchain transaction ID and number of confirmations. Blockchain transactions are public and permanently recorded on the relevant network, and neither we nor OxaPay can alter or delete them.

• Robux Payments: We collect the Roblox username you enter and use it to look up the matching public Roblox profile (display name, username, avatar, and whether the account is banned) so that you can confirm the correct account. We record the Roblox username and gamepass associated with your order and check whether that account has purchased the gamepass.

Referral Program Information

• Visitors Using a Referral Link: If you arrive through a referral link, the referral code is saved in your browser for the rest of your browsing session, one visit is counted for that code per browsing session, and the code is attached to any order you place. A discount code linked to the referrer may be applied automatically. You can remove the referrer at checkout.

• Referrers: If you apply for or take part in the referral program, we process the promotion platform you select, your referral code, commission rate, and referral balance, and daily statistics of clicks, purchases, and revenue attributed to your code.

Support Communications

• Communication Data: Information you provide when you contact us through Discord or email, including your messages and attachments, your Discord identifiers or email address, and any order details you share with us.

Information Collected Automatically

• Technical and Log Data: When your browser communicates with our servers, we and our infrastructure providers receive technical information such as your IP address, browser type and version, operating system, the pages and services requested, referring URLs, timestamps, and error information.

• Browser Storage: We store a limited amount of information in cookies and in your browser's local and session storage to keep you signed in and to remember your cart and checkout progress. See Section 6 for details.

Our storefront does not use advertising cookies, advertising pixels, or third-party analytics services. We do not ask for, and you should not send us, sensitive information such as government identification numbers, health information, or your Discord or payment account passwords.

We use personal information only for the following purposes:

• Account Authentication: To sign you in through Discord, keep you signed in, and confirm that you are authorized to view your account details, order history, and invoices.

• Order Processing and Delivery: To create invoices, process payments through our payment processors, confirm payment status, deliver license keys, and display your order history.

• Payment Verification: To match payments to orders, including confirming Stripe payment sessions, tracking blockchain confirmations for cryptocurrency payments, and detecting gamepass purchases for Robux payments.

• Fraud Prevention and Security: To detect, prevent, and investigate fraud, chargeback abuse, automated or bot activity, misuse of coupons and referrals, and unauthorized access, and to protect the integrity of the Services.

• Referral Program Administration: To attribute visits and orders to referral codes, apply referral-linked discounts, calculate commissions and balances, display referral statistics, and review referral applications.

• Customer Support and Service Communications: To respond to your inquiries and requests and to contact you about your orders, your account, or changes to the Services, this Policy, or our Terms of Service.

• Operation and Improvement: To operate, maintain, troubleshoot, and improve the Services, including checking maintenance status and diagnosing errors.

• Legal Compliance and Enforcement: To comply with accounting, tax, and other legal obligations, respond to lawful requests, enforce our Terms of Service, and establish, exercise, or defend legal claims, including payment disputes and chargebacks.

We do not use your information for targeted advertising. Apart from automated fraud and bot checks (such as Cloudflare Turnstile) that may block a checkout attempt, we do not make decisions that have legal or similarly significant effects on you based solely on automated processing. If you believe an automated check has blocked you in error, you may contact us to request a manual review.

Legal Bases for Processing

Where the EU or UK General Data Protection Regulation, or Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018), applies, we rely on the following legal bases: performance of a contract (providing your account, processing and delivering your orders, and supporting you); legitimate interests (fraud prevention, security, referral attribution, improving the Services, and defending legal claims), which we balance against your rights and interests; compliance with legal obligations (such as accounting and tax record-keeping and responding to lawful requests); the regular exercise of rights in judicial, administrative, or arbitration proceedings; and consent where it is required, which you may withdraw at any time.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only in the following circumstances:

• Discord: To authenticate you when you sign in or link your Discord account at checkout.

• Stripe: To process card, Apple Pay, Google Pay, Cash App Pay, and Pix payments, including the payment and billing details you enter on Stripe's payment form.

• OxaPay: To process cryptocurrency payments, including the order amount, the selected coin and network, and the order reference.

• Roblox and Related Services: For Robux payments, we look up the Roblox username you provide and check for your gamepass purchase. When the Robux payment page loads, your browser retrieves the gamepass name and image directly from roproxy.com (a third-party proxy for Roblox's public services) and from Roblox's image servers, which receive your IP address and browser information.

• Cloudflare: To provide Turnstile bot protection at checkout.

• Content Delivery Providers: Our pages load fonts, icons, and scripts from Google Fonts, cdnjs, jsDelivr, and Iconify. These providers receive your IP address and browser information when your browser requests these files.

• Infrastructure Providers: With hosting and infrastructure providers that operate the Services on our behalf and are permitted to use the information only to provide those services to us.

• Referrers: When you visit through a referral link or place an order with a referral code, that activity is counted in the referrer's statistics. Through the referral dashboard, referrers see only aggregated daily totals of clicks, purchases, and revenue; they do not see your name, email address, Discord account, or payment details.

• Payment Disputes and Fraud Investigations: We may share order records, delivery records, account activity, and IP addresses with payment processors and card networks to respond to chargebacks and payment disputes, and to investigate or prevent fraud.

• Legal Requirements: We may disclose information when we believe in good faith that disclosure is required by law, court order, subpoena, or a valid request from a government authority. We disclose only the information we are required to provide.

• Protection of Rights: We may disclose information where reasonably necessary to protect the rights, property, or safety of Euphoric, our users, or others, or to enforce our Terms of Service.

• Business Transfers: In the event of a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, your information may be transferred as part of that transaction. Any successor will be required to handle the information it receives in a manner consistent with this Policy.

• With Your Consent: We may share information with your explicit consent or at your direction.

We use administrative, technical, and organizational measures appropriate to the nature of the information we handle, including:

• Encrypted Connections: The storefront and our API are served over encrypted HTTPS (TLS) connections.

• No Payment Credentials Stored: Card and payment account credentials are entered into Stripe's payment form and processed by Stripe, and cryptocurrency payments are processed by OxaPay. Euphoric never stores full payment credentials.

• No Passwords Stored: Because you sign in through Discord, we do not maintain a database of user passwords.

• Access Restrictions: Account details, order history, and invoices are only available to authenticated requests with a valid session token, and access to each invoice is restricted to authorized accounts. Internal access to personal information is limited to people who need it for a legitimate business purpose.

• Session Expiry: Our sign-in cookie expires after seven (7) days, and expired or invalid sessions are rejected and cleared from your browser.

• Bot Protection: Checkout requires a Cloudflare Turnstile verification to reduce automated abuse.

The security of your Euphoric session depends on the security of your Discord account. Use a strong, unique Discord password, enable two-factor authentication on Discord, avoid signing in on shared devices, and treat your license keys as confidential.

No method of transmission over the Internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If we become aware of a security incident that affects your personal information, we will notify you and the relevant authorities where required by applicable law.

We keep personal information only for as long as necessary for the purposes described in this Policy, after which we delete or anonymize it. In particular:

• Account Information: Kept while your account is active and while we hold order records linked to it. If you ask us to delete your account, we will delete this information except where we need to keep it for the reasons below.

• Order and Transaction Records: Invoices, payment references, IP addresses, and delivery records are kept for as long as needed for accounting and tax purposes, fraud prevention, handling chargebacks and payment disputes, and enforcing our Terms of Service, which may continue after your account is deleted.

• Referral Records: Kept while you take part in the referral program and for as long as needed to calculate and settle balances and resolve disputes.

• Support Communications: Kept for as long as needed to resolve your request and maintain a record of it.

• Browser Storage: Kept for the periods described in Section 6.

• Information Held by Third Parties: Information held by Discord, Stripe, OxaPay, Roblox, Cloudflare, and other third parties is retained according to their own policies. Blockchain transaction records are permanent and cannot be deleted by anyone.

Where we are legally required to preserve information, for example because of a legal claim, investigation, or payment dispute, we will keep it for as long as that requirement applies and restrict its use to that purpose.

We use a small number of cookies and browser storage entries, all of which are needed for the Services to work. We do not use advertising or analytics cookies.

Storage Set by Euphoric

• discord_token (cookie and local storage): Stores your session token so that you stay signed in across pages. The cookie expires after seven (7) days. The local storage copy remains until your session is rejected as expired or invalid, or until you clear your browser data.

• euphoric_cart (session storage): Remembers the contents of your cart, including any coupon, during your browsing session.

• referrer and referral_counted (session storage): Remember a referral code you arrived with and prevent the same visit from being counted more than once.

• stripe-billing-draft (local storage): Saves the billing name and address you type during a Stripe checkout so they can be restored if the page reloads. Each draft is tied to a single invoice and payment session, is discarded after twenty-four (24) hours, and is removed once the payment completes and you are taken to your invoice.

Third-Party Cookies and Technologies

• Stripe and Cloudflare Turnstile may set their own cookies or use similar technologies on the checkout page for payment processing, fraud prevention, and security. Their use is governed by their own privacy policies.

You can clear or block cookies and browser storage through your browser settings. Because these items are needed for the Services to work, blocking them will prevent you from staying signed in, keeping items in your cart, or completing checkout. Clearing your site data signs you out of Euphoric. You can also revoke Euphoric's access to your Discord account at any time in Discord under Settings > Authorized Apps.

The Services rely on, integrate with, or link to third-party services that operate independently of Euphoric. This Policy does not apply to those third parties, and their handling of your information is governed by their own terms and privacy policies.

• Discord: Used for sign-in and for our official support server. Messages you post in our Discord server are also subject to Discord's policies and may be visible to other members of that server, depending on the channel.

• Payment Processors: Stripe, OxaPay, and, for Robux payments, Roblox handle payment transactions under their own terms and privacy policies.

• Digital Products: Some products sold through Euphoric may be developed or operated by third parties. When you activate or use such a product, its provider may collect information under its own terms and privacy policy, which we do not control.

• External Links: The Services may contain links to external websites. We are not responsible for the content or privacy practices of those websites.

We encourage you to review the privacy policies of any third-party services you use.

Depending on where you live, including the European Economic Area, the United Kingdom, Brazil, California, and other U.S. states with privacy laws, you may have some or all of the following rights regarding your personal information:

• Access: To confirm whether we process your personal information and to receive a copy of it.

• Correction: To correct inaccurate or incomplete personal information.

• Deletion: To request deletion of your personal information, subject to the exceptions described in Section 5.

• Portability: To receive your personal information in a structured, commonly used, machine-readable format.

• Objection and Restriction: To object to, or ask us to restrict, certain processing of your personal information, including processing based on our legitimate interests.

• Withdrawal of Consent: To withdraw consent at any time where we rely on consent, without affecting processing that took place before the withdrawal.

• Information About Sharing: To be told which categories of third parties we share your information with, and, under Brazil's LGPD, to request anonymization, blocking, or deletion of unnecessary or excessive data.

• Non-Discrimination: Not to be treated differently for exercising your privacy rights.

• Complaint: To lodge a complaint with your local data protection authority, such as a supervisory authority in the EEA, the UK Information Commissioner's Office, or Brazil's National Data Protection Authority (ANPD).

How to Exercise Your Rights

• Contact us through the channels listed in Section 12, stating the right you wish to exercise. Please include your Discord user ID or the email address used at checkout, and any relevant invoice IDs.

• To protect your information, we must verify your identity before acting on a request, for example by asking you to contact us from the Discord account linked to your data or from the email address used on your order. We may decline a request if we cannot verify your identity.

• Where the law allows, you may use an authorized agent to make a request on your behalf, and we may require proof of the agent's authority and verification of your identity.

• We will respond within thirty (30) days of receiving a verified request, or within any shorter period required by applicable law. Where the law permits an extension, we will tell you the reason and the expected timeline.

• Requests are free of charge, unless they are manifestly unfounded or excessive and applicable law permits a reasonable fee or refusal.

• If we decline your request, we will explain why. You may ask us to reconsider by replying to our response, and you may contact your local data protection authority.

Revoking Euphoric's access in Discord stops us from receiving new information from Discord, but it does not delete information we already hold. To have that information deleted, submit a deletion request as described above.

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Users must meet the age requirements in our Terms of Service.

• If we learn that we have collected personal information from a child under 13, or under the minimum age required by the laws of the child's country, we will delete it and close the associated account.

• Users between 13 and 18 years old, or below the age of majority where they live, may only use the Services with the consent of a parent or legal guardian who has reviewed our Terms of Service and this Policy.

• Parents or guardians who believe their child has provided personal information to us may contact us to review or delete that information.

We and our service providers may process and store your information in countries other than your country of residence, including the United States, where data protection laws may differ from those in your country.

• When we transfer personal information from the EEA, the UK, Brazil, or other regions with transfer restrictions, we rely on transfer mechanisms permitted by applicable law, which may include standard contractual clauses, adequacy decisions, or the transfer being necessary to perform the contract you have requested, such as processing your payment.

• Third-party services you interact with directly, such as Discord, Stripe, OxaPay, and Roblox, are responsible for their own international transfers under their own policies.

We may update this Policy from time to time. When we do, we will post the updated Policy on this page and update the "Last Updated" date at the top.

• If we make material changes, we will provide additional notice where required by law, for example through our official Discord server or on the storefront.

• Changes take effect on the effective date shown at the top of this page. Where applicable law requires your consent to a change, we will ask for it before the change applies to you.

• Your continued use of the Services after an updated Policy takes effect means that your information will be handled as described in the updated Policy.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a privacy or security concern, you may contact us through the following official channels. For requests about your data, please include your Discord user ID or the email address used at checkout, and any relevant invoice IDs: