This Privacy Policy explains how Suprender DOO ("Suprender", "we", "us", "our") collects, uses, and protects your personal data when you use this website (the "Site") and buy from us. We take your privacy seriously and aim to be clear about what we do.

1. Who is responsible for your data

The data controller is:

Suprender DOO Smederevo
Registered address: Smederevo, Serbia
Company registration number: 115740723
Contact email: info@suprender.com

If you have any questions about your data or this policy, email us at the address above.

2. What data we collect

Depending on how you use the Site, we may collect:

Account data — your name or username, email address, and password (stored in encrypted form) when you register.

Order data — the products you buy, your order history, and the email address used for delivery of digital files. For any future physical orders, this will also include a shipping address.

Payment data — we use third-party payment providers (see Section 5). We do not collect or store your full card or bank details. For PayPal we receive confirmation of payment and limited details such as your name and email. For cryptocurrency we may record the wallet address and transaction details associated with your payment.

Supporter submissions — any name, character details, or other content you submit for a Supporter Product, so we can add it to the relevant game.

Communications — the content of emails or messages you send us, and our replies.

Newsletter data — your email address, if you sign up for our newsletter.

Technical and usage data — your IP address, browser type, device information, and how you use the Site, collected through cookies and similar technologies (see Section 8).

3. How we use your data

We use your data to:

Process and deliver your orders, including digital downloads and Supporter Product placements.
Create and manage your account.
Provide customer support and respond to your messages.
Send order confirmations and important service messages.
Send marketing emails and newsletters only if you have signed up — you can unsubscribe at any time.
Detect and prevent fraud, abuse, and misuse of our products (such as unauthorised redistribution of files).
Improve the Site and our products.
Comply with our legal and tax obligations.

4. Our legal bases (GDPR)

Where the EU/UK General Data Protection Regulation or the Serbian Law on Personal Data Protection applies, we rely on the following legal bases:

Performance of a contract — to process and deliver your orders and manage your account.
Consent — for marketing emails and certain cookies. You can withdraw consent at any time.
Legitimate interests — to keep the Site secure, prevent fraud, and improve our products, in a way that respects your rights.
Legal obligation — to meet accounting, tax, and consumer-law requirements.

5. Payments and third-party processors

We use trusted third parties to handle payments. When you pay, your payment is processed by them under their own privacy policies:

PayPal — see PayPal's privacy policy for how they handle your data.
Cryptocurrency — blockchain transactions are public by nature; the wallet address and transaction are recorded on the relevant blockchain, which we do not control.

We only receive the information needed to confirm and fulfil your order.

6. Who we share your data with

We do not sell your personal data. We share it only with:

Payment providers, to process your payments.
Service providers who help us run the Site and business (for example, hosting, email delivery, and — for any future physical products — print-on-demand and shipping partners), under agreements that protect your data.
Discord, where a Discord perk is involved, to grant your role — subject to Discord's own privacy policy.
Authorities or advisors, where we are legally required to, or to protect our rights.

7. International transfers

Some of our providers may process data outside your country, including outside the EEA. Where this happens, we take steps to ensure your data is protected by appropriate safeguards, such as standard contractual clauses.

8. Cookies

We use cookies and similar technologies to make the Site work, remember your cart and login, understand how the Site is used, and (with your consent) for analytics. You can control cookies through your browser settings and, where shown, our cookie banner. Some essential cookies are needed for the Site to function and cannot be switched off.

9. How long we keep your data

We keep your data only as long as needed for the purposes above:

Account data — while your account is active, and for a reasonable period after.
Order and transaction records — for as long as required by tax and accounting law.
Newsletter data — until you unsubscribe.
Support messages — for a reasonable period after your query is resolved.

When data is no longer needed, we delete or anonymise it.

10. Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data ("right to be forgotten") in certain circumstances.
Restrict or object to certain processing.
Data portability — receive your data in a portable format.
Withdraw consent at any time, where we rely on consent.

To exercise any of these, email milo@suprender.com. We will respond within the time required by law. You also have the right to complain to a data protection authority — in Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection. If you are in the EU, you may also contact your local supervisory authority.

11. Security

We use reasonable technical and organisational measures to protect your data, including encryption of passwords and secure handling of payments through our providers. No method of transmission over the internet is completely secure, but we work to protect your information and limit access to it.

12. Children

The Site is not directed at children under 16. We do not knowingly collect data from children under this age. If you believe a child has provided us data, contact us and we will delete it.

13. Marketing and newsletter

If you sign up for our newsletter, we will email you updates, prototypes, and behind-the-scenes content. Every email includes an unsubscribe link, and you can opt out at any time. We will not add you to marketing emails without your sign-up.

14. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always posted on the Site, and we will update the "Last updated" date when we make changes.

15. Contact

For any privacy questions or requests, email info@suprender.com.