GDPR & Data Protection

Privacy Policy

Last updated: October 2026 · Canonical Domain: waifu.party

GDPR Highlights: We only store usernames, emails, and hashed auth tokens. We never touch credit cards or payment info (handled entirely by Gumroad). You have the right to request full account deletion and data removal at any time by emailing vanshika69101@gmail.com.

1. Overview & Data Controller

Waifu Overload (accessible at waifu.party) is committed to protecting your privacy and ensuring compliance with the European Union General Data Protection Regulation (GDPR) and international privacy laws.

For any privacy inquiries, data deletion requests, or questions regarding your personal information, our designated Data Controller contact is: vanshika69101@gmail.com.

2. What Information We Collect & Store

We adhere strictly to the principle of data minimization. We only collect the minimal information required to authenticate accounts, deliver artwork, and facilitate commissions:
  • Email Address: Used for account creation, Google OAuth authentication, and commission status notifications.
  • Display Name / Username: Sourced from your Google profile or customized in account settings.
  • Authentication Identifiers: Securely hashed tokens and encrypted session identifiers generated by Supabase Auth (we never store plain text credentials).
  • Platform Activity: Your subscription tier, credit balance, and art commission submission history.

3. What We NEVER Collect or Store (Payment Data)

We never collect, store, process, or have access to your credit card numbers, debit card details, bank account details, or payment card security codes.

All financial transactions, monthly/yearly subscription processing, and credit pack purchases are handled exclusively and securely by Gumroad, Inc. When you make a purchase, you are transacting directly with Gumroad under their PCI-DSS compliant secure infrastructure and privacy policy. Gumroad only notifies our servers via encrypted webhook of your tier status and email so we can unlock your platform benefits.

4. Your GDPR & Privacy Rights (Right to Deletion)

Under the GDPR and global privacy frameworks, you have significant rights regarding your personal data:
  • Right to Erasure (Account Deletion): You have the absolute right to request the permanent deletion of your account and complete erasure of all personal data associated with your profile. To exercise this right, simply email us at vanshika69101@gmail.com from your registered email address with the subject "Data Deletion Request". We process and verify deletion requests promptly within 30 days (often within 48 hours).
  • Right of Access & Portability: You may request a copy of all personal data held about you in a structured, commonly used format.
  • Right to Rectification: You can update or correct your profile details at any time in your Settings or by contacting us.
  • Right to Withdraw Consent: You may revoke consent for data processing at any time by requesting account termination.

5. Cookies & Local Storage

We use essential cookies and browser storage solely to maintain your active login session, remember your 18+ age verification confirmation, and protect against cross-site request forgery (CSRF). We do not sell your personal data to third parties or run third-party advertising trackers.

6. Contact the Data Controller

For any privacy questions, GDPR inquiries, or immediate data removal, contact us directly at:

Privacy & Data Protection Email: vanshika69101@gmail.com
© 2026 Waifu Overload (waifu.party). All rights reserved.