Privacy Policy.

Information we collect

Visits and site activity

When you use the site, we record a random first-party browser ID, numbered visits, pages, approved query and campaign values, referrer, clicks, click position, scroll milestones, visible-page presence, time, browser, operating system, device class, language, timezone, screen and viewport facts, IP address, and approximate IP-based country, region, city, and coordinates. Approximate GeoIP is not GPS. When our host does not provide that coarse location, a geolocation service may derive it from the same IP address.

Google sign-in and membership

When you sign in with Google, we receive your verified email address and name. When you sign in by email, we send a short-lived one-time link to the inbox you entered. We record the sign-in method, first and latest successful sign-in times, and total successful sign-ins. We use verified identity details to create your site session, identify your membership, protect member areas, and recognize the owner account. We never receive your Google password and do not create a site password.

Billing

Stripe handles card checkout, payment methods, tax identifiers entered at checkout, and subscription changes. We store the Stripe customer, subscription, price, and subscription-item identifiers, membership tier, paid quantity, status, access dates, and billing period needed to grant access. We do not receive or store your complete card number.

Organization licensing

For organization accounts, we store the organization name and type, owner and administrator identities, optional enrollment domain, license pools, paid and assigned seat counts, invited email addresses, roles, assignment status, and related billing references. Organization administrators can see the verified emails and roles assigned to pools they manage. If domain enrollment is enabled, a verified sign-in using that domain can claim an available seat automatically.

If you open the optional Monero donation link, the site gives your wallet our public XMR receive address and a short description. The site does not receive your seed phrase, private keys, wallet balance, or transaction history. A donation is not connected to membership access.

Messages, community, and downloads

Sending a contact message requires Google sign-in. We store your verified account identity, contact message, and the reply information you include, along with the visit and request context for that submission. Forum threads and replies are public and retain the displayed author name, time, and moderation state. Authorized paid releases and Starter Pack downloads record the verified account, access tier, project, release identity, version, channel, checksum, filename, byte count, time, request page, referrer, browser, operating system, device class, IP address, and available approximate GeoIP and network context.

Our product sites

Demon Hunter Labs also receives the visit activity and contact messages of the lab's own product sites, currently the Yodi site (yodi.charmandermon.chatgpt.site). Those sites send the same kinds of visit and activity information described above, tagged with the site's name, and store their own random browser and visit identifiers in that site's local storage. Their contact form does not require sign-in: it sends the email address, optional name, and message you type, a short arithmetic check that keeps out automated spam, and the visit and request context for that submission. We store those messages beside our own and email them to the owner.

How we use information

• Run the site, sign you in, manage personal and organization membership, assign seats, and deliver eligible source releases or the free Yeho Starter Pack.
• Process and answer messages, class inquiries, licensing conversations, and support requests.
• Operate and moderate the public community forum.
• Understand visits, returns, navigation, product interest, performance, and conversion.
• Prevent abuse, investigate failures, protect accounts and downloads, and keep an auditable security trail.
• Meet legal, accounting, payment, and contractual obligations.

Service providers and disclosure

We share only the information needed for providers to perform their part of the service. The site currently uses OpenAI Sites and Cloudflare infrastructure for hosting and network delivery, Google Identity Services for optional sign-in, Stripe for billing, and Resend for one-time sign-in links, contact-email delivery, and owner notifications when a new customer joins. Their own policies govern information they process independently.

We may also disclose information when required by law, to protect people or the service, to investigate fraud or abuse, or as part of a business transaction where the recipient must continue to respect applicable privacy obligations.

Cookies and local storage

A secure, HTTP-only first-party cookie keeps a signed-in member session. Local storage keeps random first-party browser and visit identifiers so we can recognize a return from the same browser and group activity into 30-minute visits. These identifiers are not used to follow you across unrelated websites. Google and Stripe may use their own browser storage when you interact with their services.

Retention and security

We keep account, billing, release, forum, contact, security, and analytics records for as long as reasonably needed to provide the service, maintain business and security history, resolve disputes, and meet legal or accounting obligations. Hidden forum content may remain in the moderation record rather than being silently erased.

We use access controls, signed sessions, server-side entitlement checks, private storage, bounded inputs, and protected administrative routes. No online system can promise perfect security.

Your choices and requests

You can block browser storage, but sign-in and return-visit recognition may stop working. You can manage or cancel an active subscription through the Stripe customer portal in your account. Depending on where you live, you may ask to access, correct, or delete personal information associated with you.

Email eternalspacewizards@gmail.com with the subject Privacy Request. We may need to verify your identity. Some payment, security, legal, and public-forum records may need to be retained.

Children

The online membership and community service is not directed to children under 13, and we do not knowingly collect their personal information. Classes that include children must be arranged and supervised by a parent, guardian, school, or responsible organization. Contact us if you believe a child submitted personal information through the site.

Changes and contact

We will update this page when our data practices materially change and revise the date at the top. Questions about this policy can be sent to eternalspacewizards@gmail.com.

Using the service is also subject to our Terms of Service.