Privacy Policy
Effective 28 September 2026
This policy explains what Vastaya (operated by Brady Cole, United States) collects, why, and what we do with it. The short version: we collect the minimum needed to run each product, we do not sell data, and we do not run ads or third-party tracking.
1. This website
vastaya.com is a static site. It sets no cookies and includes no analytics or tracking scripts. Our hosting provider, Cloudflare, may log standard request data (IP address, user agent, requested URL) to serve and protect the site.
2. The Complete Budget Planner
Purchases happen on Etsy. Etsy shares with us the information needed to fulfil the order, such as your Etsy username and the item bought. We do not receive your payment details. The template runs entirely inside your own Google account; your budget data never reaches us.
3. Feedback portal (feedback.vastaya.com)
When you submit feedback we store your email address and message so we can reply. Your email is used only for that reply and never for marketing. Voting on feature requests sets a functional cookie that prevents duplicate votes; it does not identify you personally. We keep feedback until it is resolved and for a reasonable period afterwards for reference.
4. Purple Dice (Discord bot)
What we collect
- Discord identifiers: your user ID, and the server and channel IDs where the bot is used. These are how the bot knows whose character is whose and which party belongs to which channel.
- Character data: the stats, attacks, skills, spells, and features extracted from the character sheet PDF you upload, plus the character and player names written on it.
- Uploaded files: the PDF itself is processed to extract that data and is not retained after processing.
- Subscription details: if you subscribe to premium features, Stripe tells us your customer ID, subscription status, and the Discord account or server the plan is attached to. We never see your full card number.
What we do not collect
The bot does not read your server's messages. It receives only the slash commands and file uploads you send to it directly.
Retention and deletion
Character data is kept so you do not have to re-upload every session. You can delete it at any time with the bot's own commands, and removing the bot from a server removes that server's party data. You can also email us to have everything associated with your Discord account erased.
5. Payments
Stripe processes all subscription payments. Stripe's collection and use of your payment information is described in Stripe's privacy policy. We receive only what is needed to know that a plan is active.
6. Sharing
We do not sell or rent personal data. We share it only with the service providers needed to run the products (Cloudflare for hosting, Stripe for payments, Discord and Etsy as the platforms the products run on), or when the law requires it.
7. Security
Data is stored on infrastructure we control, transmitted over encrypted connections, and accessible only to the operator. No system is perfectly secure, so please do not upload documents containing information you would not want stored, beyond what a character sheet normally holds.
8. Children
Our products are not directed at children under 13. Discord requires users to be at least 13, and we rely on that requirement. If you believe a child has provided us data, contact us and we will delete it.
9. Your rights
You can ask us what data we hold about you, ask for it to be corrected or deleted, or object to how it is used. Email support@vastaya.com and we will respond within 30 days. Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA; we honor those requests regardless of location.
10. Changes
We will update this policy if our practices change. The effective date at the top reflects the current version.
11. Contact
Privacy questions: support@vastaya.com.