Privacy

Respawn Interactive LLC, doing business as Respawn Icons, is a multi-member limited liability company registered in Florida. It operates this website and is responsible for the personal information described in this policy. “We”, “us” and “our” refer to that company.

Business mailing address: 5320 S Westshore Blvd, Tampa, FL 33611, United States. Contact: [email protected].

We use your email address to deliver download links and your purchase record to provide access to your files.

There are no analytics, no advertising pixels and no third-party trackers of any kind on this site. We do not sell or share your visit data for marketing.

We never see your card. Payment happens on Stripe, and the number never touches our servers.

Everything below lives in our own database. It is the complete list.

• Your email address. Where download links go, and how a purchase finds you if you make an account later.
• Your password, hashed. Stored as a PBKDF2 hash with a per-account salt. We do not store the original password or ask you to send it to support.
• What you bought — the product, the price paid, the date, and Stripe’s reference for the payment, so we can match a payment to an order if you ever ask us to.
• Receipt delivery attempts — your email address, the order reference, whether the download-link email was delivered, and any delivery error, so a temporary failure can be retried.
• Checkout records — the selected products, original prices, download email address, account association, notification preference, and payment status. These records let us confirm and recover a checkout, including one that was not completed. We do not store card details or your billing address.
• Coupon usage — the code, discount, checkout reference, account association, and keyed hashes of the download email and IP address. We use these records to enforce coupon limits, track pending checkouts, and prevent repeated redemptions. Coupon records do not contain the raw IP address.
• Sales reports — order references, products, amounts, refunds, payment deductions, and dated financial reports for our business records. We also retain the billing name and email supplied by our payment provider to help staff review possible repeated coupon use. Matching names or similar emails are review signals, not proof of abuse, and do not automatically block purchases. These reports do not include card details.
• Anything you send us through the support form — what kind of message it is, the title, the message itself, and the email address you give us if you want a reply. The address is optional and is used only to reply; it is never added to the mailing list. Bear in mind that a message describing a problem contains whatever you chose to tell us while describing it, so please leave out passwords, license keys and payment details.
• A record of downloads — which file was requested, when, the country, and a keyed hash of your IP address. We use these records to review unusual download activity. We do not store the raw IP address in this log. We record the first visit to each purchase link to provide a single introductory download window. Short-lived verification codes are stored as keyed hashes, with expiry and attempt limits; purchase-level controls let us disable emailed links while retaining account access.
• Sign-in events and failed attempts, so an account can be locked after repeated wrong passwords and so we can tell you what happened if something looks wrong.
• Your address on the mailing list, if you asked to be on it, along with the date and where you signed up. It is used for news, new products and offers. We use your purchase records to send product-update emails only for profiles and widgets you own. Unsubscribing stops these marketing emails; purchase and account emails are separate.
• A record of which announcements we sent you, so that a send interrupted halfway cannot start again and mail you a second copy of the same thing. It is the address and the date, nothing about whether you opened it — we do not track that.

That is all. We do not ask for your name, your address, your age, your date of birth or your phone number, because we do not need any of them to send you a file.

For UK and EU visitors, the legal bases are:

• Performing our contract with you — your email and your purchase record. We cannot deliver a file we have no address for.
• Our legitimate interests — the hashed download log and the sign-in events, which exist to protect the shop from abuse and to let us answer a support question honestly.
• Your consent — the mailing list, and nothing else. You can withdraw it with one click in any email we send.
• A legal obligation — records of what was sold and for how much, which tax law requires us to keep whatever else you ask us to delete.

We use the following services:

• Stripe is the seller on your transaction and handles the payment. You deal with them directly; we are told only that a payment succeeded, for how much, and Stripe’s reference for it, together with checkout contact details, including the billing name and email when available. They are their own data controller and their privacy policy governs what they do — including the card details we never receive.
• Cloudflare hosts the site, the database, the files and the email we send. They process this data on our behalf and under our instructions.
• Other parties. We do not sell or rent your data or share it with analytics providers, ad networks, or data brokers.

Our Discord server is Discord’s own service under their terms — joining it is a separate decision you make, and nothing links your Discord account to your purchase unless you tell us it does. The member count shown on our Support page is a total; it identifies nobody.

Two, both strictly necessary, neither used for tracking:

• ri_acct — proves you are signed in. Set only when you sign in, and cleared when you sign out.
• ri_gate — remembers that you entered the access code, while the site is still private before launch. It will disappear once the shop opens.

Your browser also keeps a few things locally: your cart, whether you chose light or dark mode, whether you have already seen the latest “what’s new” note and whether you asked not to be shown it again, and a copy of your own sign-in state so the account menu does not flicker on every page. Those are not tracking cookies, and clearing your browser data removes them. Your cart is sent to our server when checking prices or paying.

Your browser remembers bundle selections you explicitly choose: one profile and one widget per pair. These selections are sent to our server for price checks and checkout. Removing a bundle selection removes both paired products from your cart; removing either item individually also clears its pair.

During a coupon checkout, this browser tab temporarily remembers the applied code, cart and email association, and signed checkout reference. These details are sent to our server when you apply the code or continue to payment, allowing an interrupted checkout to resume without reserving another coupon use. Removing the code or closing the tab clears this temporary storage.

Because we set no analytics or advertising cookies, there is nothing here that requires a consent banner, which is why you have not been shown one.

• Your account and purchases: for as long as you have an account, to maintain access to your purchases and updates.
• Download logs: they carry only a hashed IP and exist for abuse detection.
• Mailing list: until you unsubscribe. We then keep a record that you unsubscribed — deliberately, because it is the only reliable way to make sure you are never added again by mistake.
• Sales records: kept as long as tax law requires, even after an account is deleted.

If you are in the UK or EU you have the right to see what we hold about you, correct it, have it deleted, object to how we use it, or take it elsewhere. We extend the same to everybody, regardless of location.

Email [email protected] from the address you bought with and say what you want. We will do it within 30 days and usually much sooner. There is no charge and no form.

One honest limitation: if you ask us to delete everything, we must keep the bare sales record for tax purposes, and you will lose access to your downloads, because the record of what you bought is the access. We will say so before we do it, not after.

If you think we have handled your data badly, please tell us first — but you can also complain to your data protection regulator, which in the UK is the Information Commissioner’s Office.

Passwords are hashed with PBKDF2 and a per-account salt, never stored or transmitted in a form we could read. Session cookies are HttpOnly, Secure and SameSite, so a script cannot read your session and it is never sent over an unencrypted connection. Repeated failed sign-ins lock an account rather than allowing an endless guessing run. Download links are cryptographically signed, so one cannot be edited into a link for something you did not buy. Every page is served over HTTPS.

If a breach affects your data, we will promptly notify you and explain any steps you should take.

This shop is not intended for children, and we do not knowingly collect anything from them. If you believe a child has given us their details, email us and we will remove it.

We will email subscribers about material changes to how we use data we already hold.