Privacy Policy

Kisetto collects as little as it can: your Discord name and picture to sign you in, what you buy so you can download it, and, for creators, where to send their money. We don’t sell data, show ads, or use it to train AI.

Who’s responsible: Sebastian Hallqvist (enskild firma), Heleneborgsgatan 6B, 117 32 Stockholm, Sweden, is the data controller. Email hello@kisetto.com about anything in this policy.

What we collect and why

Data	From	Why	Legal basis (GDPR)
Discord ID, display name, profile picture	Discord, when you sign in	Your account	Contract
The avatar base you save	You	Filtering items that fit	Contract
Purchases, refunds, prices paid, and when you agreed to immediate delivery	Our checkout and Stripe	Delivering items, receipts, bookkeeping	Contract, legal duty (bookkeeping)
Email and country on your receipt	Stripe checkout	Receipts and the right tax	Contract, legal duty (tax)
Download log: which file, when, and a shortened, scrambled form of your IP address	Your browser	Stopping file sharing and abuse	Legitimate interest
Creators: shop details, the BOOTH/Gumroad/X link you give us, listings and files	You	Running your shop, checking you’re the creator	Contract
Creators: email address and language	You	Emails about sales, reviews and payouts	Contract
Creators: bank or Wise details, encrypted	You	Paying your royalties	Contract
Creators: legal name, address and tax details, if the law requires them	You	Tax reporting	Legal duty

We never see your full card number. Stripe handles it.

Who else handles your data

Company	What for	Where
Cloudflare	Hosting the site, the database and item files, and counting visits (Web Analytics)	Worldwide, under EU standard contract clauses
Stripe	Taking payments and calculating tax	EU and US, under EU standard contract clauses
Discord	Signing you in	US, under EU standard contract clauses
Wise	Sending creators’ payouts (creators only)	EU, UK and the payout country
Resend	Sending emails to creators and answering email to hello@kisetto.com	EU (Ireland)

We count visits with Cloudflare Web Analytics. It sets no cookies and doesn’t follow you to other sites: it sees which page you opened, the site that sent you, your country and your browser and device type, and we only see totals. We don’t use advertising trackers. Fonts are served from Kisetto’s own servers.

Cookies

Kisetto only sets cookies the site needs to work, so there’s no cookie banner.

Cookie	What it does	Kept for
ks_session	Keeps you signed in	30 days
ks_oauth_state, ks_oauth_next	Protects the Discord sign-in step and returns you to the right page	10 minutes
ks_lang	Remembers English or Japanese	1 year
ks_ref	Remembers which creator’s shop link you came from, so that creator pays a lower fee on your purchase	30 days

How long we keep it

• Account: until you ask us to delete it.
• Purchases and receipts: 7 years, because Swedish bookkeeping law requires it, even if you delete your account.
• Download logs: 12 months.
• Creators’ payout details: until they’re changed, or until the shop is closed and the last payout is made.

Your rights

You can ask to see the data we hold about you, correct it, delete it, get a copy, or object to how we use it. Email hello@kisetto.com and we’ll reply within 30 days. If you’re unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to the data protection authority where you live.