Privacy Policy

1. Introduction and Scope

1.1 ammos.lol (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy (“Policy”) describes how we collect, use, disclose, and safeguard your information when you access or use our website, platform, and related services (collectively, the “Service”).

1.2 By accessing or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must not access or use the Service.

1.3 For purposes of applicable data protection laws, we act as a “data controller” (or equivalent) with respect to the personal information we collect and process as described in this Policy.

2. Definitions

In this Policy:

• “Personal Information” (or “Personal Data” where applicable) means any information relating to an identified or identifiable natural person, as defined under applicable data protection laws.
• “Processing” means any operation or set of operations performed on Personal Information, including collection, storage, use, disclosure, and deletion.
• “You” and “your” refer to the individual using the Service or the entity on whose behalf such individual is acting.

3. Information We Collect

3.1 Information You Provide to Us. We collect information that you voluntarily provide when using the Service, including without limitation:

• Account and profile information: email address, display name, username or alias, password (stored in hashed form), profile avatar, theme and appearance preferences, and other account settings.
• Profile and link content: content you add to your biolink or profile page, including links, titles, images, descriptions, and other customizations that you choose to publish.
• Communications: information you provide when you contact us for support, feedback, or other inquiries (e.g., name, email, and the content of your message).

3.2 Information Collected Automatically. When you access or use the Service, we and our service providers may automatically collect certain information, including without limitation:

• Usage data: pages visited, features used, actions taken (including link clicks and interactions with your Profile Page), and the date and time of such activities.
• Device and technical data: IP address, browser type and version, operating system, device type, unique device identifiers, and similar technical identifiers.
• Log data: access logs, error logs, and other diagnostic and security-related data generated in the course of operating the Service.

3.3 Cookies and Similar Technologies. We use cookies, session storage, and similar technologies to operate the Service, maintain your session, remember your preferences, and for security and analytics purposes. You may configure your browser to refuse or limit cookies; certain features of the Service may not function properly if you do so.

4. How We Use Your Information

We Process your Personal Information for the following purposes, and where required by law we rely on the legal bases indicated:

• To provide and operate the Service: to create and manage your account, authenticate you, host and display your Profile Page, and deliver the functionality you request (performance of our contract with you; legitimate interests).
• To communicate with you: to send you transactional and service-related messages, including without limitation email verification, password reset, login codes (e.g., one-time passwords), and important account or security notices (performance of contract; legitimate interests; legal obligation where applicable).
• To support and respond to inquiries: to respond to your requests for support or feedback (performance of contract; legitimate interests).
• To protect the Service and our users: to detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Service (legitimate interests; legal obligation).
• To improve and analyze the Service: to understand how the Service is used, to develop and improve our products and features, and to perform analytics in an aggregated or de-identified manner where feasible (legitimate interests).
• To comply with legal obligations: to comply with applicable laws, regulations, legal process, or enforceable governmental requests (legal obligation).

We do not sell your Personal Information. We do not use your Personal Information for third-party advertising or for profiling for advertising purposes.

5. How We Share and Disclose Your Information

We may share or disclose your Personal Information only in the following circumstances:

• Service providers: We may share your information with third-party vendors, contractors, and service providers who perform services on our behalf (e.g., hosting, email delivery, analytics, customer support), subject to contractual terms that restrict their use of your information to providing services to us and in accordance with this Policy.
• Legal and safety: We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud or security issues.
• Business transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction, subject to the same privacy commitments set forth in this Policy.

Public profile. Content you choose to publish on your Profile Page (e.g., at ammos.lol/yourname) is publicly accessible to anyone who has or obtains the link. You are responsible for the information you choose to make public.

6. Data Retention

6.1 We retain your Personal Information for as long as your account is active or as needed to provide you the Service and to fulfill the purposes described in this Policy.

6.2 Deleting your account. You can ask us to delete your account by contacting us at [email protected]. Our staff then delete the account. Accounts suspended for breaching our Terms of Service are deleted automatically seven (7) days after suspension, unless the suspension is lifted before then.

6.3 What is deleted. When an account is deleted, we delete the account record and the data stored with it in our database, including your profile page and its settings, links, badges, aliases, widgets and connected integrations, the records of your uploaded files, your templates, the view and link-click statistics of your profile, your account activity history and your trusted devices. Any stored Discord access tokens are deleted with the account.

6.4 What we keep, and why. Some information is not removed when an account is deleted:

• Payment records: the amount, product, date and payment references of your purchases (and, for gifts, the recipient and any gift message) are kept, no longer linked to your account, to meet our accounting and legal obligations and to handle refunds, chargebacks and disputes. Our payment processor, Stripe, keeps its own records of your payments and your customer details under its own policies; we do not currently delete your customer record at Stripe automatically.
• Sign-up checks: the device identifier and IP address recorded when the account was created are kept, no longer linked to your account, to enforce our limits on creating multiple accounts.
• User ID and username history: we keep your user ID number and, in most cases, your former username, so that the ID is not reused and the username can be offered to other users.
• Uploaded files: files you uploaded (such as avatars, banners, backgrounds, audio and other uploads) are not currently removed from our file storage when an account is deleted and may remain reachable at their previous web addresses.
• Discord: deleting your account does not revoke the authorisation you gave us in Discord; you can remove it in Discord under User Settings → Authorized Apps. Notices of purchases posted to our staff Discord channel (your username, the product and the amount) are not removed.
• Other records: in-app notifications sent to your account and records of signed-in sessions (IP address and browser) may remain in our database until they are removed or expire.
• Logs and backups: log data and backup copies may be retained for a limited period for operational and security reasons before being deleted or anonymized.

We may also keep information for longer where we are required or permitted to do so (e.g., to comply with legal obligations, resolve disputes, enforce our agreements, or for legitimate security purposes). If you would like any of the information above removed, tell us when you make your request. We will tell you what we can remove and what we need to keep, and why.

7. Security

We implement appropriate technical and organizational measures designed to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit (e.g., HTTPS), secure storage practices, and access controls. Passwords are hashed and not stored in plain text. No method of transmission over the Internet or electronic storage is completely secure; we cannot guarantee absolute security of your information.

8. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights with respect to your Personal Information, which may include:

• Access: the right to request access to the Personal Information we hold about you.
• Correction: the right to request correction of inaccurate or incomplete Personal Information (you may update much of your information through your account settings).
• Deletion: the right to request deletion of your Personal Information (you can request deletion of your account and associated data by contacting us at [email protected]).
• Restriction and objection: in certain jurisdictions, the right to restrict or object to certain Processing of your Personal Information.
• Data portability: where applicable, the right to receive your Personal Information in a structured, commonly used, and machine-readable format.
• Withdraw consent: where Processing is based on consent, the right to withdraw consent at any time, without affecting the lawfulness of Processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact details in Section 12. We will respond to your request in accordance with applicable law and, where the UK GDPR applies, within one month of receiving it (or of confirming your identity, where we need to). If your request is complex, or you have made a number of requests, we may extend this by up to two further months; if we do, we will tell you within the first month and explain why. You may also manage cookie preferences through your browser settings.

If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with a supervisory authority in your country of residence.

9. Children’s Privacy

The Service is not directed to individuals under the age of thirteen (13) (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect Personal Information from children under 13. If you become aware that a child has provided us with Personal Information without parental consent, please contact us and we will take steps to delete such information.

10. International Data Transfers

Your Personal Information may be transferred to, stored, and Processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your jurisdiction. Where we transfer Personal Information from the European Economic Area, the United Kingdom, or other jurisdictions that require appropriate safeguards, we implement appropriate safeguards (such as standard contractual clauses or other mechanisms recognized by applicable law) to ensure that your information receives an adequate level of protection. You may request further information about the safeguards we use for international transfers by contacting us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and update the “Last updated” date. Where required by applicable law or where changes are material, we may provide additional notice (e.g., by email or a prominent notice within the Service). Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must discontinue use of the Service.

12. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to submit a request regarding your Personal Information, please contact us at [email protected], through the contact methods provided on our website or via the Discord link in the footer of the Service.