1. User Age
dulcet.lol is not intended for users under 13, and users under 13 may not create an account. We do not knowingly collect personal information from users under 13.
If you believe a user under 13 has provided personal information to dulcet.lol, contact legal@dulcet.lol so we can investigate and take appropriate action.
2. Information We Collect
We collect information you provide when you create and manage a dulcet.lol account, use profile features, contact support, or make a payment.
- Account information, including your email address, username, password credentials handled by our authentication provider, email-verification status, and multi-factor authentication settings.
- Profile information and user content, including your display name, biography, avatar, background images, uploaded audio, social links, custom links, badges, colors, effects, and other settings.
- Connected-game information you voluntarily authorize, which may include a platform user ID, Riot ID, PUUID, display name, region, avatar, verification status, and selected game statistics. OAuth access or refresh credentials are used only to maintain the connection and are never displayed publicly.
- Widget information you choose to publish, such as third-party usernames, public profile or storefront URLs, server addresses, selected public posts or products, and short statistics or labels shown on your profile.
- Transaction information, including Stripe checkout identifiers, payment status, purchase type, donation amount, and Stripe customer identifier. dulcet.lol does not directly receive or store your full payment-card number.
- Usage information, including profile-view counts, basic request and device information made available by browsers and hosting systems, and a short-lived cookie used to avoid counting the same profile view repeatedly within a day.
- Security and anti-abuse information, including cryptographically hashed IP addresses, browser or user-agent information, and security-event timestamps. Raw IP addresses are not stored by dulcet.lol.
- Support and legal communications that you send to us.
3. Signing Up With Discord
If you choose to create a dulcet.lol account using Discord, you will be redirected to Discord to authorize the connection. dulcet.lol requests Discord's identify permission, which allows Discord to provide your unique Discord user ID and basic profile information.
For account signup, dulcet.lol permanently retains only your Discord user ID. We use this identifier to create your account, prevent the same Discord account from being used for multiple dulcet.lol accounts, support login, and protect the Service against abuse.
dulcet.lol does not request or retain your Discord email address, password, messages, server membership, friends list, or linked Discord connections as part of Discord signup. Your Discord password is entered only on Discord and is never provided to dulcet.lol.
During authorization, a temporary Discord access token is processed only long enough to retrieve your Discord user ID and is not retained. A temporary encrypted signup cookie may remain in your browser for up to 15 minutes so you can finish creating your account.
You will create a separate dulcet.lol username and password. You may also voluntarily provide a recovery email address. Recovery emails are used only for account recovery and security-related purposes.
Authorized dulcet.lol staff may see a masked version of your Discord user ID when necessary for account administration, security, abuse prevention, or support. Your complete Discord user ID is not displayed on your public profile through the signup connection.
The optional Discord profile-display connection is separate from Discord signup and may process additional profile information, such as your Discord username, avatar, and avatar decoration. Disconnecting that optional profile feature does not remove the Discord user ID used to authenticate an account created through Discord.
4. How We Use Information
- Create, authenticate, secure, and recover accounts.
- Host, display, customize, and operate public biolink profiles.
- Verify game accounts that you choose to connect and display only the game information you choose to make public.
- Process Premium purchases and donations and provide purchased features.
- Count profile visits, maintain badges, and understand how the Service is used.
- Detect abuse, enforce our Terms, investigate security incidents, and protect users.
- Use purpose-limited hashed IP addresses to enforce rate limits, reduce automated or repeated likes, and secure account-recovery activity. These hashes are not used to connect or ban related accounts.
- Respond to support, privacy, legal, and copyright requests.
- Maintain, troubleshoot, and improve dulcet.lol.
5. Public Profile Information
dulcet.lol profiles are designed to be public. Your username, display name, biography, uploaded profile media, social links, custom links, badges, and selected profile settings may be visible to anyone who visits your profile URL.
Do not publish information that you want to keep private. External websites linked from your profile have their own privacy practices.
Game-account information is not made public unless you connect the applicable account, expressly consent to public display, and enable the connection on your profile. Dulcet does not make Riot player information available for users who have not opted in.
Third-party widgets are optional and public when enabled. Public-data widgets use information you enter or information already publicly available from the linked service. Private account, membership, or store data is accessed only after a separate authorization flow and is not displayed unless you enable it.
6. Service Providers and Disclosure
We may share information with service providers only as reasonably necessary to operate dulcet.lol. These providers process information under their own terms and privacy commitments.
- Supabase provides database, authentication, and file-storage services.
- Discord provides OAuth authorization for Discord signup and optional Discord profile connections.
- Stripe provides checkout and payment-processing services.
- Riot Games, Roblox, Valve/Steam, Blizzard, and other selected game providers may authenticate connected accounts and return account information according to their own privacy policies.
- GitHub, Reddit, Bluesky, Mastodon, MyAnimeList, Patreon, Etsy, Shopify, Minecraft-related services, and other widget providers may return public or authorized account information according to their own privacy policies.
- Hosting, infrastructure, security, and email providers may process technical or account information required to deliver the Service.
- We may disclose information when required by law, to respond to valid legal process, to protect rights or safety, or in connection with a merger, financing, acquisition, or transfer of the Service.
7. Cookies and Similar Technologies
dulcet.lol and its service providers use cookies or local browser storage that are necessary for account sessions, security, and core site functionality.
When a public profile is viewed, dulcet.lol sets a profile-specific cookie for approximately 24 hours so repeated visits from the same browser are not repeatedly added to that profile's view count.
8. Data Retention
We retain account and profile information while your account is active and for as long as reasonably necessary to operate the Service, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.
Payment processors may retain transaction records according to their own legal and operational requirements. Backup copies may remain temporarily after deletion before being overwritten.
Connected-game identifiers are retained while the connection remains active. OAuth credentials and connected-game identifiers are deleted or revoked when you disconnect the integration or delete your Dulcet account, except where limited retention is required for security or legal compliance.
A Discord user ID retained for Discord signup remains associated with the account while it is active and is deleted when the dulcet.lol account is permanently deleted, except where limited retention is required for security, abuse prevention, or legal compliance.
9. Your Choices and Rights
- You may review and update most profile information from your dashboard.
- You may remove uploaded media and profile links.
- You may hide or disconnect a game integration at any time. Disconnecting removes the active public connection and instructs Dulcet to delete stored provider credentials associated with that connection.
- You may hide, edit, or remove a third-party widget at any time. Removing a widget deletes its saved display configuration; disconnecting an authenticated widget also instructs Dulcet to delete its stored provider credentials.
- You may permanently delete your dulcet.lol account through Account Settings. This removes the active profile, associated uploads, and login account, subject to limited legal or security retention.
- You may contact legal@dulcet.lol to request access, correction, deletion, or information about your data. Applicable law may provide additional rights based on where you live.
10. Security
We use reasonable administrative and technical measures intended to protect information, including authenticated access controls, row-level database policies, secure payment processing, email verification, and optional multi-factor authentication.
No online service can guarantee absolute security. You are responsible for using a strong password and protecting your login credentials.
11. International Use
dulcet.lol and its service providers may process information in the United States and other countries. Those countries may have data-protection laws that differ from the laws where you live.
12. Sale of Personal Information
dulcet.lol does not sell personal information for money. We also do not use sensitive account or payment information for targeted advertising.
13. Changes to This Policy
We may update this Privacy Policy as dulcet.lol changes. The revised policy will be posted on this page with a new effective date. Material changes may also be communicated through the Service when appropriate.
14. Contact
Privacy questions and requests: legal@dulcet.lol
General support: support@dulcet.lol
Legal questions: legal@dulcet.lol