Privacy Policy

This policy explains what personal data Qubik collects, why, and what your rights are. It follows the EU General Data Protection Regulation (GDPR).

Data controller: Arthur Van Strydonck, Belgium. Contact for any privacy question: arthur.vanstrydonck.mail@gmail.com.

1. Data we collect

• Account: username, email address and password (stored only in encrypted form, we can never read it).
• Activity: resources you publish (files, images, descriptions), purchases, downloads, moderation decisions and scan reports.
• Payments: handled by Stripe. We receive the payment status and amount, never your card details.
• Technical data: IP address and server logs (security and troubleshooting), and two cookies described below.
• How you found Qubik: when you create your account, we save the site or campaign link that brought you (for example discord.com or a ?ref= link), the first page you saw and your country (worked out from your IP address, which we don't keep). It helps us know which links bring new members.
• Public profile: your username, profile photo (if you add one), member since date, the resources you sell and the reviews you receive as a seller or as a customer are shown on your profile page. What you buy is never shown.
• Private messages: messages and images you send to other members. They are private: the moderators can only read a conversation if one of its members reports it. A message that talks about paying outside Qubik (PayPal, Discord…) shows a safety warning; nothing is blocked or read by a person.
• Showcase videos: some resources show a YouTube video. The YouTube player only loads when you click play; YouTube (Google) may then set its own cookies.
• Visit statistics: anonymous and without cookies, measured by Qubik and by Vercel Web Analytics: page viewed, site of origin, campaign link, country, type of device, browser and site language, plus the searches typed in the catalog. A visitor is only an anonymous fingerprint, recalculated every day from the IP address and browser (the IP address itself is never stored), so you can't be identified or followed from one day to the next. Kept 13 months. Moderators only see totals.

We do not sell your data and we do not use advertising trackers.

2. Why we use it (legal bases)

• To create your account, sell and deliver resources, and pay sellers — performance of the contract.
• To keep Qubik secure, scan files, prevent fraud and abuse — legitimate interest.
• To keep accounting and tax records — legal obligation.
• We will ask for your consent before sending marketing emails, if we ever do.

3. Cookies

Qubik only uses cookies that are strictly necessary:

• qubik_session: keeps you logged in (secure, unreadable by scripts).
• qubik-lang: remembers your language (English or French) for one year.

These cookies do not need your consent, which is why there is no cookie banner. The visit statistics use no cookies; the site of origin is kept only in your browser tab (session storage) until you sign up or close the tab.

4. Who processes your data

We use trusted providers who process data on our behalf:

• Vercel (hosting, file storage and visit statistics) — servers in the EU and the United States, covered by the EU Standard Contractual Clauses.
• Neon (database) — EU region (Frankfurt).
• Stripe (payments).
• Translation services (MyMemory or DeepL) — only receive the public descriptions of resources, never your personal data.
• AI content review (OVHcloud AI Endpoints, Pollinations, LLM7 and OpenRouter, which forwards to free AI models) — receive the title, description and an extract of the file (object tree and scripts) of resources put up for sale, to check that they match. Never your personal data.

5. How long we keep it

• Account data: as long as your account is open, then deleted within 30 days of closure, except what we must keep by law.
• Purchase and payment records: 10 years (Belgian accounting obligations).
• Private messages: as long as both accounts are open (deleted with your account).
• Server logs: up to 12 months.

6. Your rights

You can ask to access, correct, delete or export your data, object to or restrict its use, by writing to arthur.vanstrydonck.mail@gmail.com. We answer within one month.

You can also file a complaint with your data protection authority (for example the CNIL in France or the Data Protection Authority in Belgium).

7. Young users

Qubik is open from 13 years old. If you are under the age of digital consent in your country, a parent or legal guardian must agree to your use of Qubik. Parents can contact us at arthur.vanstrydonck.mail@gmail.com to access or delete their child's data.

8. Security

Passwords are hashed, connections are encrypted (HTTPS), downloads are only available to buyers, and access to the database is restricted.

9. Changes

We may update this policy. The date of the latest version is shown at the top of this page; we will tell you about important changes.