In one paragraph
- Lethium is run from the European Union, so the GDPR applies to all the personal data we hold, wherever you live.
- Email septyishere@gmail.com, tell us your Discord or BuiltByBit name and what you want. It is free and we answer within one month.
How to make a request
Send an email to septyishere@gmail.com. These buttons open a message that is already filled in:
We need to be sure the request comes from you, so that nobody else can obtain or delete your licenses. We may ask you to confirm it from the Discord or BuiltByBit account that is linked to your licenses. We do not ask for identity documents.
What you can ask for
Access (Art. 15)
We tell you whether we hold data about you and send you a copy: your account record, linked accounts, licenses, the IP addresses and server fingerprints recorded for each license, the log of license checks, and the purchase notifications we received from BuiltByBit.
Correction (Art. 16)
If something is wrong or out of date, for example the BuiltByBit account linked to your licenses, we fix it.
Deletion (Art. 17)
We delete your account and everything attached to it. See what deletion means before you ask.
Restriction (Art. 18)
You can ask us to keep your data but stop using it, for example while we check a correction you asked for.
Portability (Art. 20)
We send you the data you gave us, and the data created by your use of the license portal, in a machine-readable file.
Objection (Art. 21)
You can object to processing we base on legitimate interests: web server logs, the history of your Discord names, and the IP addresses and fingerprints we keep to prevent piracy. We then stop, unless we have compelling reasons that outweigh yours or need the data for a legal claim. We will tell you which.
Consent
We do not currently rely on consent for anything. If that changes, you will be able to withdraw your consent at any time.
Automated decisions (Art. 22)
License checks are automatic: a key that is disabled, expired or over its server limit is refused. If that happened to you and you think it is wrong, write to us and a person will review it.
What we hold
| System | Data |
|---|---|
| lethium.net | Server logs with IP addresses, deleted after 14 days. No account, no cookies. |
| License portal | Discord user ID and display names, BuiltByBit member ID and username, purchase notifications, license keys and their settings, a login cookie. |
| License server | For each license: the IP addresses and server fingerprints it was used from, and a log of checks. |
| Discord bot | Discord user ID, BuiltByBit member ID, purchase reference and the roles given. |
| Mailbox | Emails you sent us and our replies. |
The Privacy Policy gives the purpose, legal basis and retention period for each of these.
What deletion means
- Your license keys are deleted with your account. Plugins that use them stop validating, so only ask for deletion if you no longer run our plugins.
- Your purchase stays in your BuiltByBit account, because BuiltByBit holds that record, not us. Ask BuiltByBit if you want that deleted too.
- Messages you posted on Discord are held by Discord. You can delete them there.
- We may keep the minimum we need for a legal claim, for example when a key was leaked or resold. We will tell you if that is the case.
How long it takes
We answer within one month of receiving your request. If a request is unusually complex we may need up to two more months, and we will tell you so within the first month. Requests are free. We may refuse or charge a reasonable fee only when requests are clearly unfounded or repeated excessively.
Complaints
If you are unhappy with how we handled your data or your request, please tell us first so we can put it right: septyishere@gmail.com.
You also have the right to complain to a data protection authority: the one in the EU country where you live or work, or ours, the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). The European Data Protection Board lists every national authority.