Privacy Policy

This explains what +99 Ultra Leaks collects, why, and what we do with it. We keep it short because there genuinely is not much.

What we collect

• Your Discord profile. When you sign in with Discord we receive your user id, username, display name, avatar and email address. We store these so you can be identified, and so purchases and coins can be tied to you.
• Your Discord roles. Read once at sign-in to decide whether you may post resources, use the admin panel, or have VIP styling.
• What you do on the site. Purchases, coin balances and a full coin transaction history, resources you save to a wishlist, spins, daily task progress, reviews you write, and download counts.
• Basic traffic figures. Page views and a hash of your IP address with your browser string, so we can count unique visitors without storing your IP. That hash cannot be reversed into an address.
• Screening results. If anti-VPN screening is switched on, we store a hash of your IP and whether it was flagged, again never the address itself.
• Payment confirmation. If you buy coins, Stripe tells us the order reference, amount and that it completed. We never see or store your card details.

What we do NOT collect

• No passwords. Your password stays with Discord.
• No card numbers. Payments happen entirely on Stripe's site.
• No advertising or analytics trackers. There are no third-party trackers on this site.

Why we are allowed to hold it

[State your legal basis here. For most setups it is: performance of a contract, to deliver the resource you bought and the coins you paid for, and legitimate interests such as preventing fraud and keeping the site secure. Marketing email needs its own consent.]

Who else sees it

• Discord, which authenticates you and provides your profile.
• Stripe, which processes payments and never sends us card details.
• Our email provider, but only if you buy something and a receipt needs sending, or you ask us to send one.
• Our hosting provider, which stores the database and uploaded files on its servers.

We do not sell your data. We do not share it with resource owners beyond what a listing page already shows, such as your display name on a review.

Cookies

• One cookie, leaks_session, which keeps you signed in. It is required for the site to work and cannot be turned off.
• No advertising, tracking or cross-site cookies are set.

How long we keep it

[Set your retention periods. A reasonable starting point: account data while your account exists, purchase and coin records for as long as the law requires for tax purposes, traffic figures for around 12 months, and screening results for a short window such as 30 days.]

Your rights

Depending on where you live you may have the right to see your data, correct it, delete it, restrict or object to its use, and receive a copy. To exercise any of these, contact us through our Discord or the email in the footer. We will always verify it is really you before handing anything over.

You can also delete your Discord connection and stop using the site at any time. Note that coin balances are not refundable, so deleting an account forfeits any coins left on it.

Security

Passwords are never stored because we never receive them. Downloads are checked against a signed session and a purchase record before any file is served. We do not claim a system is unbreakable; if you find a weakness, please tell us privately rather than publicising it.

Children

This store is not intended for anyone under the age at which you can legally enter a contract where you live. We do not knowingly collect data from children.

Changes and contact

If we change this policy in a way that matters, we will update the date at the top and say so on the site. Questions: our Discord, or the email in the footer.

Questions? Ask in our Discord.