Legal
Privacy Policy
This describes the data Geniath actually collects to run accounts, licenses, and the public site. It is not a claim about tools we do not run.
Last updated 12 September 2026
Account data
When you register we store the email, username, and password hash you submit. After you sign in we keep a session so the dashboard and admin tools work: an access token in session storage and a refresh token in local storage on your browser.
If you link Discord, we store the Discord id you connect. Two-factor (authenticator or passkey) stores only what is needed to verify the next sign-in.
Licenses and checkout
Purchases go through SellApp. SellApp is the checkout operator for card and wallet payments. They see whatever you type in their checkout. We receive enough order data to attach a license to your account. We do not store full card numbers.
Creator referral cookie
If you open a creator link (`?a=`), we look up that code and, when it is valid, set a first-party cookie named geniath_affiliate. It lasts 30 days. A later click on a different creator link overwrites it (last click wins). The cookie holds the public code so checkout can apply that creator's discount.
That cookie is not an advertising tracker. It is how a sale is attributed to a creator.
What we do not collect here
This frontend does not run a third-party analytics pixel, a public newsletter list, or a named data-protection officer contact. Server logs and error reports exist so the product can be fixed. We do not sell member lists.
Contact
For a privacy request, open a Discord ticket at https://discord.geniath.one. Ask from the email on the account when you can.
