Privacy Policy

Data Protection Information according to GDPR

1. Data Controller & Data Processor

Data Controller:
MYR WEBOPS LIMITED
Company Number: 15868430
Registered in England and Wales
Email: privacy@myr-creative.com

Data Processor (Payment & Transactions):
MYR Creative GmbH
Hanauer Landstraße 204
60314 Frankfurt am Main, Germany
Email: legal@myr-creative.com

2. Data We Collect

2.1 Discord Authentication Data

When you log in via Discord OAuth, we collect:

  • Discord User ID: Your unique Discord identifier
  • Username: Your Discord username
  • Avatar URL: Your Discord profile picture
  • Email Address: Your Discord email (if provided)

Legal Basis: Contract performance (Art. 6(1)(b) GDPR) and consent (Art. 6(1)(a) GDPR)

2.2 File Delivery Data

When you receive or download files, we store:

  • Delivery Records: File metadata, delivery status, download timestamps
  • File Information: Original filename, file size, encryption keys
  • Access Logs: IP addresses, timestamps of access and downloads

Legal Basis: Contract performance (Art. 6(1)(b) GDPR)

2.3 Subscription Data

If you subscribe to a paid plan (RuffyPRO or RuffyMAX):

  • Stripe Customer ID: Your payment processor identifier
  • Subscription Status: Plan tier, billing period, subscription status
  • Payment Information: Stored securely by Stripe (we do not store card details)

Legal Basis: Contract performance (Art. 6(1)(b) GDPR)

3. Purpose of Data Processing

We process your data for the following purposes:

  • Authentication: To verify your identity and provide secure access
  • Service Delivery: To deliver files and manage your deliveries
  • Subscription Management: To manage your Ruffy subscription and billing
  • Security: To protect against unauthorized access and fraud
  • Legal Compliance: To comply with applicable laws and regulations

4. Cookies and Tracking

We use the following cookies:

Cookie Name Type Purpose Duration
delivery_session Essential Maintains your logged-in session 30 days
cookie_consent Essential Stores your cookie consent preference 1 year
delivery_lang Essential Stores your language preference 1 year

Essential: These cookies are necessary for the website to function and cannot be disabled. They are set in response to your actions such as logging in.

Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) for essential website functionality

5. Data Sharing and Third Parties

5.1 Discord

We use Discord OAuth for authentication. Your login credentials are processed by Discord. Please review Discord's Privacy Policy at https://discord.com/privacy

5.2 Stripe

Payment processing is handled by Stripe. Payment information is processed and stored by Stripe. Please review Stripe's Privacy Policy at https://stripe.com/privacy

5.3 Cloudflare R2

Files are stored encrypted on Cloudflare R2 infrastructure. Cloudflare acts as a data processor under our instruction.

We do not sell your personal data to third parties.

6. Data Retention

  • Free Users: Deliveries are deleted after 7 days
  • RuffyPRO/RuffyMAX Subscribers: Deliveries are retained permanently (until you delete them or cancel your subscription)
  • Account Data: Retained for the duration of your account plus 30 days after account closure
  • Access Logs: Retained for 90 days for security purposes

7. Your Rights under GDPR

You have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You can request a copy of your personal data
  • Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate data
  • Right to Erasure (Art. 17 GDPR): You can request deletion of your data ("right to be forgotten")
  • Right to Data Portability (Art. 20 GDPR): You can receive your data in a machine-readable format
  • Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw consent at any time
  • Right to Lodge a Complaint: You can file a complaint with your local data protection authority

To exercise these rights, contact us at: privacy@myr-creative.com

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption: All files are encrypted at rest using AES-256 encryption
  • HTTPS: All data transmission uses TLS encryption
  • Access Control: Strict access controls limit who can access your data
  • Regular Audits: We conduct regular security reviews and updates

9. Children's Privacy

Our service is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our service after changes constitutes acceptance of the updated policy.

Last Updated: January 2026

11. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

Data Protection Contact
Email: privacy@myr-creative.com
MYR WEBOPS LIMITED
Company Number: 15868430