Privacy Policy

This policy explains what personal data Reprep (“we”) collects when you use reprep.net (the “Service”), why we collect it, and the rights you have over it. Reprep acts as the data controller for this data. You can reach us at hello@reprep.net.

1. Data we collect

Account data — your email address, username and a hashed password when you register.
Content you publish — the links, text, product entries and images you add to your page. This content is public by design: anyone with your page link can see it.
Discord integration data — if you connect the Reprep Discord bot, we store your Discord server ID, the channel IDs you configure, and related settings.
Technical data — standard server logs (IP address, browser user agent, timestamps) generated by our hosting infrastructure for security and reliability.

We do not collect payment data — the Service is currently free.

2. Why we process it

To provide the Service (contract performance) — creating your account, hosting and displaying your page, running integrations you enable.
To keep the Service safe (legitimate interest) — preventing abuse, fraud and attacks, debugging problems.
To meet legal obligations — responding to valid legal requests.

We do not sell your personal data and we do not use it for advertising.

3. Cookies and local storage

We use only strictly-necessary cookies. These are set by our authentication provider (Supabase) to keep you signed in and to protect your account — for example cookies whose names begin with sb-. They are essential to provide the Service you asked for.

We do not use advertising cookies, and we do not load third-party analytics or tracking scripts such as Google Analytics, Meta Pixel or Hotjar. Our own visitor statistics are measured on our servers using a one-way hash of your IP address; they do not place a tracking cookie or any other identifier on your device.

We also use your browser’s local storage for a few functional preferences (for example, remembering that you dismissed a tip in the dashboard). This information stays on your device and is not used to track you.

Because we rely only on strictly-necessary cookies, EU law does not require us to ask for your consent before setting them — but we still show a short notice so you know what we do. You can clear cookies at any time through your browser settings; clearing the essential ones will sign you out.

4. Who else touches your data

We use a small set of processors to run the Service:

Supabase — database, authentication and file storage.
Vercel — website hosting and server logs.
Discord — only if you use the Discord integration.

These providers process data on our behalf under their own data-processing agreements. We may also disclose data where required by law.

5. How long we keep it

We keep your data for as long as your account exists. When you delete your account, your account data and content are deleted; copies may persist in encrypted backups for up to 30 days before being purged. Server logs are retained for a short rolling window.

6. Your rights

Under the GDPR you can ask us to:

access the personal data we hold about you;
correct inaccurate data;
delete your data (“right to be forgotten”);
restrict or object to processing;
export your data in a portable format.

Email hello@reprep.net to exercise any of these. You also have the right to lodge a complaint with your local supervisory authority — in Slovakia, the Office for Personal Data Protection (dataprotection.gov.sk).

7. Children

The Service is not intended for anyone under 16, and we do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new “last updated” date.