Privacy Policy

This policy explains what Elder Labs LLC (“Elder Labs”, “we”, “us”) collects when you use elderlabs.dev (the “Site”), why, and the choices you have. Elder Labs is a limited liability company based in New Mexico, United States. Questions go to contact@elderlabs.dev.

What we collect

When you browse

You can browse modules and services without an account. We don’t use analytics or advertising tools. Like any website, our hosting provider, Cloudflare, receives technical information with each request (such as your IP address, browser and the page you asked for) to deliver the Site, protect it from abuse and help us fix errors. These logs are kept only briefly.

When you create an account

• Your email address, and whether it’s verified. If you sign in with an email link, that’s all we receive. Before sending the link, Cloudflare Turnstile checks in your browser that you’re a person, not a bot. It looks at technical signals from your browser, doesn’t show ads or track you across sites, and we only receive a pass or fail.
• Your name and profile picture, if you sign in with Discord or Google, plus the ID of your Discord or Google account and the sign-in tokens they issue. We use these only to sign you in. We don’t read your messages, contacts or anything else.
• Sign-in sessions: when each one started and expires, and the IP address and browser it came from, so a session can’t easily be used from somewhere else.

When you buy a premium module

Payments are handled by Stripe. Your card details go directly to Stripe and never reach our servers. We keep a record of each purchase: the module, the amount and currency, its date and status (paid or refunded), and Stripe’s reference numbers and receipt link, so we can show your Library, deliver your modules and handle refunds.

When you report a bug

Bug reports you send from a module’s page become issues in that module’s GitHub repository: your title, description, steps and the versions you enter. For free modules the repository is public, so anyone can read the report. The issue doesn’t include your name or email. We keep a record of which account sent which report, so we can follow up and limit spam.

When you suggest a module

We keep your suggestion together with your account and email address, so we can reply and give you the module if we build it. We email it to contact@elderlabs.dev and send you a copy.

When you contact us

If you email us, we keep the conversation so we can answer you and follow up.

How we use it

• To sign you in and keep your account secure.
• To sell you premium modules, deliver them, and handle refunds and support.
• To send the emails you ask for, such as sign-in links. We don’t send marketing emails.
• To keep the Site working, prevent abuse, and meet our legal and tax obligations.

We never sell or rent your personal information, and we don’t share it for advertising.

Cookies

We use a cookie only to keep you signed in. It’s strictly necessary, so there’s no cookie banner. When you check out, you’re on Stripe’s own checkout page, which uses its own cookies under Stripe’s privacy policy.

Services we rely on

These companies process data on our behalf or when you choose to use them, each under its own privacy policy:

• Cloudflare: hosting, our database, file storage, the emails we send (sign-in links and suggestion copies), and Turnstile, the bot check on the email sign-in form.
• Stripe: payments, receipts and refunds.
• Discord and Google: only if you choose to sign in with them.
• GitHub: hosts our modules and the bug reports you send. When you install a free module in Foundry VTT, Foundry downloads it from GitHub.
• YouTube: some modules show YouTube videos. The preview image loads from YouTube’s image servers when you open a module’s Media tab. The video player itself only loads when you press play, using YouTube’s privacy-enhanced mode (youtube-nocookie.com).

Links to other websites, such as the services we list, lead to sites with their own privacy policies.

How long we keep it

• Your account stays until you delete it.
• Sign-in sessions expire after 7 days without use, or when you sign out.
• Sign-in links expire after 15 minutes.
• Deleting your account removes your profile, sessions and purchase records from the Site right away. Stripe keeps its own records of past payments, as payment and tax rules require.

Your choices and rights

Wherever you live, you can ask to see the personal information we have about you, get a copy of it, have it corrected, or have it deleted. You can delete your account yourself from your Library. For anything else, email contact@elderlabs.dev. We’ll answer within 30 days, and we may need to confirm it’s really you first. We won’t treat you differently for using these rights.

California residents have these rights under the CCPA. We don’t sell or share personal information as the CCPA defines those terms.

If you’re in the European Economic Area or the United Kingdom, you can also object to or restrict how we use your data, and complain to your local data protection authority. We rely on our contract with you (your account and purchases), our legitimate interests (keeping the Site secure and working) and our legal obligations (such as tax records). Your data is stored and processed in the United States and wherever our providers operate.

Security

Everything travels over HTTPS. We have no passwords to leak: you sign in with an email link, Discord or Google. Access to our systems is limited to us. No system is perfectly secure, but we’ll tell you promptly if something happens that affects your data.

Children

The Site isn’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child has given us personal information, email us and we’ll delete it.

Changes

If we change this policy, we’ll update the date at the top. If a change is significant, we’ll say so on the Site before it takes effect.

Contact

Elder Labs LLC · New Mexico, United States · contact@elderlabs.dev

See also our Terms of Service. Stripe’s privacy policy is at stripe.com/privacy(opens in a new tab).