M MUSA

Privacy Policy

Last updated: June 2026

1. Who We Are

This Privacy Policy explains how MUSA ("MUSA," "we," "our," or "us") handles personal data in connection with our website and the digital products we sell. MUSA is operated by an individual based in Croatia, who is the data controller responsible for your personal data. For any privacy-related questions, or to exercise your rights, you can contact us on our Discord.

2. The Data We Collect

We have deliberately kept data collection to a minimum.

2.1 Information you provide when you buy: when you complete a purchase, our payment provider (Stripe) collects the email address and Discord username you enter so that we can deliver your license key and provide support. We do not operate our own checkout, and we never see or store your full payment card details — those are handled directly by Stripe.

2.2 Technical data: our website does not set its own cookies and does not run analytics or tracking scripts. However, our hosting provider and the third-party content embedded on the site (see Section 5) may automatically receive limited technical information, such as your IP address and browser type. This is standard for delivering and securing any website.

3. How and Why We Use Your Data

We use your data only for the following purposes, each with a legal basis under the GDPR:

  • To deliver the product you purchased and provide your license key — performance of our contract with you.
  • To provide support and answer your questions — performance of our contract and our legitimate interest in helping customers.
  • To prevent fraud and keep our service and customers secure — our legitimate interest.
  • To meet legal, tax, and accounting obligations — compliance with a legal obligation.

4. How Long We Keep It

We keep purchase and contact data only for as long as needed to deliver your product, provide support, and satisfy our legal and accounting obligations, after which it is deleted or anonymized.

5. Third-Party Services

To run our store we rely on a small number of third-party providers, each of which processes data under its own privacy policy:

  • Stripe: our payment provider. When you check out, Stripe processes your email address, the Discord username you provide, and your payment details to take payment and deliver your key.
  • Discord: used to deliver keys and provide support; your activity there is governed by Discord's privacy policy.
  • YouTube / Google: promotional videos are embedded using YouTube's privacy-enhanced mode (youtube-nocookie.com). Google may still receive technical data such as your IP address when a video loads or is played.
  • Google Fonts: page fonts are currently served by Google, which may receive your IP address when the page loads.
  • Cloudflare: hosts and delivers our website and processes limited technical data (such as IP address) to serve and protect the site.

We do not sell your personal data, and we do not share it with third parties except as described here or where required by law.

6. International Transfers

Some providers (for example Stripe and Google) may process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Your Rights

If you are in the EU/EEA — or another region with similar laws — you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You can exercise these rights by contacting us on Discord. You also have the right to lodge a complaint with a supervisory authority — in Croatia this is the Croatian Personal Data Protection Agency (AZOP), or you may contact the authority in your own country.

8. Children

Our website and products are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Data Security

We serve our website over HTTPS and rely on reputable providers to process payments and host our content. No method of transmission or storage is completely secure, but we take reasonable measures to protect the limited data we handle.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it last changed. Continued use of our website after an update means you accept the revised policy.

11. Contact

For any questions about this Privacy Policy or how we handle your data, contact us on our Discord.

Your privacy matters to us, and we have built MUSA to collect as little of your data as possible.