Privacy

Last updated 8 October 2026

Orb Farmer is run by a single developer and decides what happens to the data below. Contact: [email protected].

This page describes everything the licence service receives and keeps. It is short because the service is small.

What we hold

• Your Discord account id. The licence is tied to the account, so this is the licence itself. Not your username, and nothing else about the account.
• The email address you give at checkout, passed to us by Link so that a purchase can be matched to a licence and so we can reach you about it.
• Subscription status and dates — active, past due, cancelled, and when the paid period ends.
• Stripe customer and subscription identifiers, to link the two.
• Messages you send to support. If you use Contact us, your selected Discord account sends your message to orbfarmer.app as a friend-request note or a direct message. We receive that message and the public account information Discord shows with it, so we can respond to your help request, feedback or feature suggestion. Sending through the app also uploads a copy of your message and that account’s Activity log to our private support service for 48 hours.
• Technical error reports and logs you choose to send. Send log uploads the selected account’s recent log, account ID/name when available, app version, operating system and app status to help diagnose your issue. Reports are accessible only to support and expire after 48 hours; files are removed by the next cleanup, normally within one minute. The app also sends a limited diagnostic report automatically when a technical failure occurs. This is enabled by default and can be disabled in Settings. Automatic reports include recent Activity entries, the error stage and app/private-client versions; repeated errors are grouped and uploads are limited. Reporting never reads your Discord conversations, screenshots or profile files. Failed uploads may receive one bounded retry with the same reference. Known credentials, email addresses, URL secrets and Windows user-folder names are filtered before storage. Please avoid typing passwords or other sensitive information in a support message.

What we do not hold

• Your Discord token. The app uses it on your PC to authenticate requests sent directly to Discord, and asks us only about the resulting account id — so the token is never sent to us, never seen by us and never stored by us. On your machine it is encrypted with your operating system's key store. Linux requires an unlocked desktop keyring to save a login.
• Your card details, and your billing address. The purchase happens on Link's pages and Link is the seller. We never receive either.
• Your general Discord activity. The app does not report your other conversations or servers to us. Diagnostic reports may contain quest names, progress and errors already shown in the Activity log, but are sent when you choose Send log or Send message, or automatically for technical failures while automatic error reporting is enabled in Settings.

Profile Picker

Profile Picker reads your profile, available decorations, ownership and Orbs balance directly from Discord. Saved presets and cropped avatar/banner files stay on this computer, separately for each Discord account; they are not uploaded to our licence or support service. Selecting a decoration or saving a preset does not change your Discord profile. Equip sends the selected changes, including any chosen images, directly to Discord. Orbs purchases require a confirmation showing the items and price. Card purchases open Discord's own Shop.

Image pasting reads only an image, and only when you choose the paste action. Profile Picker does not monitor your clipboard. Local purchase/equip records help prevent duplicate actions after an interrupted connection; an uncertain purchase is checked before another purchase is allowed.

Diagnostics

When automatic error reporting is enabled and the app cannot prepare its Discord client, it also sends a small compatibility counter: the Discord version, app version and a fixed error category. It contains no account ID, token, file path or free-form log. Disabling automatic error reporting stops this counter too. Older versions may send more detailed startup messages; the service filters known credentials and Windows user-folder names before retaining them.

Why we may hold it

To perform the contract you entered into when buying a licence (Art. 6(1)(b) GDPR), and to meet the accounting obligations that come with selling something (Art. 6(1)(c)).

Who else sees it

• Link, a Stripe company — sells the licence as merchant of record, and therefore holds the purchase itself: your payment details, billing address, invoices and receipts. Those are governed by Link's own privacy terms, not by this page. We receive from them only what is listed above.
• Cloudflare — carries the traffic to our service and serves the downloads.

Nothing is sold, and nothing is shared for advertising. The app talks to Discord directly from your PC, the way your own Discord client does; we are not in the middle of that.

How long

Licence records are kept while the licence exists and for as long afterwards as tax law requires us to keep the sale (in Spain, generally four to six years). Diagnostic reports are kept for 90 days.

Your rights

You may ask for a copy of what we hold, correct it, delete it, restrict its use, or object to it, by writing to [email protected]. Deleting a licence record ends the licence. You may also complain to the Spanish data protection authority (AEPD, aepd.es) or to the authority where you live.

This website

No cookies, no analytics, no trackers, and no third-party fonts or scripts. Cloudflare keeps ordinary server logs for a short period as part of delivering the site.