Privacy policy
Last updated: Oct 16, 2026
This translation is provided for convenience. In case of discrepancy, the Italian version prevails.
Data collected at sign-in
Sign-in takes place exclusively through Discord. At the time of authorisation the following are read and stored: Discord ID, username, any nickname, profile picture and verified email address. If the user is a member of the staff server, the roles they hold there are also read, solely to assign the correct permissions. No password is ever requested or stored.
Data related to purchases
For each order the following are stored: order reference, items, amount, payment outcome and the email address used for the purchase. Card details never pass through this site: they are processed directly by Stripe or Tebex, according to their respective privacy policies.
Technical data
IP address and browser type are recorded on sign-ins, downloads and operations that change data. They serve to protect accounts and detect abuse, and are kept for as long as necessary for that purpose.
Cookies
The site uses two technical cookies: one keeps the session after sign-in, the other remembers the chosen language. No profiling cookies or third-party analytics tools are used.
Retention
Order data are kept for the period required by accounting and tax obligations. Technical logs are deleted periodically. Users may request deletion of their account: orders remain, detached from the account, solely to fulfil those obligations.
Optional BIOS Voice Studio analytics
App analytics require consent separate from update and policy requests. They collect a pseudonymous UUID, declared version and build, startup events, observed installations, updates, sanitized errors and observed integrations. The UUID is not linked to shop accounts. Audio, transcripts, hardware IDs, user or device names, personal paths, private servers and complete diagnostic exports are not accepted.
Events containing UUIDs are retained for 14 days; daily totals without UUIDs for 365 days. Policy sessions expire within 5 minutes. Download requests are counted separately and do not prove installations. Disabling consent in the app stops future submissions; existing data expire according to retention.
Data subject rights
You may request access to, rectification, erasure, restriction and portability of your data through the contact page.
Data controller: BIOS Lab.