This Privacy Policy explains how ammo.lol ("we," "our," or "us") collects, uses, shares, and protects your personal information when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
ammo.lol is the data controller responsible for your personal information. If you have questions about this Privacy Policy or our data practices, please contact us through our support channels.
When you create an account, we collect:
When you create or update your profile, we collect:
We collect anonymized and pseudonymized data about how you use our Service:
Note: We hash IP addresses and visitor identifiers using SHA-256 to protect privacy. We do not store raw IP addresses or create detailed user profiles from this data.
When you make a purchase, we collect:
Important: We do not store credit card numbers or sensitive payment information. All payment processing is handled by Stripe, and payment data is subject to Stripe's privacy policy.
We use cookies and similar technologies to:
We use session cookies that are necessary for the Service to function. These cookies are essential and cannot be disabled. We do not use tracking cookies or third-party advertising cookies without your explicit consent.
We process your personal information based on the following legal grounds under GDPR:
We use your personal information to:
We share your information with the following third-party service providers who act as data processors:
We use Supabase for authentication, database hosting, and file storage. Supabase processes your account information, profile data, usage data, and uploaded files (such as avatars, backgrounds, and music files). Supabase is GDPR compliant and stores data in secure data centers. For more information, see Supabase's privacy policy: https://supabase.com/privacy
We use Stripe for payment processing. Stripe processes payment information and transaction data. Stripe is PCI-DSS compliant and handles all sensitive payment data. For more information, see Stripe's privacy policy: https://stripe.com/privacy
We use Cloudflare for content delivery, security, and performance services. Cloudflare processes technical data including IP addresses, request headers, traffic patterns, and DNS queries to provide CDN services, DDoS protection, and security features. Cloudflare is GDPR compliant and processes data in accordance with their privacy policy. For more information, see Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
We use hosting and infrastructure services (such as Vercel) to host and deliver our Service. These services may process technical data (such as IP addresses, request logs, and error logs) necessary for the operation of the Service. For more information, see Vercel's privacy policy: https://vercel.com/legal/privacy-policy
We may disclose your information:
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers comply with GDPR requirements through:
We retain your personal information for as long as necessary to:
When you delete your account, we permanently delete your personal data and content from active systems within 30 days. Some data may be retained in backups for up to 90 days for security and compliance purposes before being permanently deleted.
Transaction records may be retained for up to 7 years to comply with tax and accounting requirements.
If you are located in the EEA or UK, you have the following rights regarding your personal information:
You have the right to request a copy of the personal information we hold about you.
You have the right to correct inaccurate or incomplete personal information. You can update most information through your account settings.
You have the right to request deletion of your personal information. You can delete your account at any time through your account settings, which will initiate the deletion process.
You have the right to request that we limit how we use your personal information in certain circumstances.
You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service.
You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you have the right to withdraw your consent at any time.
You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights. In the EU, you can contact your local data protection authority.
To exercise any of these rights, please contact us through our support channels. We will respond to your request within one month.
We implement technical and organizational measures to protect your personal information:
While we take reasonable security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected information from a child under 16, we will take steps to delete that information. If you believe we have collected information from a child under 16, please contact us immediately.
When you publish your profile, the information you choose to make public (such as your handle, display name, bio, avatar, and links) will be visible to anyone who visits your profile URL. You can control what information is public through your profile settings. We are not responsible for how others use information you make public.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through the Service.
Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our support channels.
Last updated: December 10, 2025