Hey there
I wanted to take the time to explain how bottomlicense.com handles your data and and considers your privacy.
bottomlicense.com is designed with your privacy in mind. I believe that services I build do not have a right to your personal information, and that you should be able to enjoy this service without worrying about your data. The approach bottomlicense.com takes is simple: store only what's needed for the service to work, and prove it with a fully open-source and auditable codebase.
If you end up using bottomlicense.com, I hope you enjoy the time you spend with us. Thank you for reading.
— MochaFox
More Specifically:
What Data We Store
License Data
Unique IDs, NFC Tag IDs (serial numbers), unique license codes (for links), single-use activation codes (for claiming), activation status, and timestamps. This is the core data needed to handle license creation, activation, validation, and revocation.
User Information
Display names, email addresses (for email-authenticated accounts), profile images, age consent confirmation, and links to your licenses. For Discord users, we store your Discord user ID, avatar, username, and OAuth tokens to maintain your login.
Session Data
When you log in, we store session tokens, your IP address, browser information (user agent), and session expiration times. This data is used for security purposes and to keep you logged in.
Authentication Data
For Discord sign-in, we store OAuth tokens (access, refresh, and ID tokens) to maintain your authenticated session. For email accounts, we store securely hashed passwords. Anonymous/guest accounts are completely passwordless.
Usage Analytics
We use locally-hosted Umami Analytics to understand how the site is used. Unlike Google Analytics, this data never leaves our servers and contains no personal identifiers. If you would like to see this analytics data, you may click here to see the same dashboard we use to monitor the site.
What We DON'T Store
Plaintext Passwords
We never store your password in plaintext. Email account passwords are securely hashed. Anonymous and Discord accounts are completely passwordless.
Personal Details
Unless you write them yourself in your profile, we won't store your real name, address, phone number, or other identifying info.
You Might Like to Know About:
Accountless Activation
Our account system is designed to allow activation of licenses with completely throwaway user details. You can activate licenses with just a display name.
Licenses registered this way are linked to an account that uses token-based authentication, which requires no email or password.
Since there's no email or password associated with licenses registered this way, they are entirely disposable. Keep in mind however, that losing your login token means your licenses cannot be recovered, reset, or updated later on. Additionally, while we don't recommend it, we consider token-based accounts transferrable.
Full Transparency
The entire bottomlicense.com codebase is open source and available on GitHub.
You can see exactly how we handle data, what we store, and how the privacy features work.
More Info:
Why Umami Over Google Analytics?
It's Our Data Not Theirs
Unlike Google Analytics, our Umami installation runs on our own servers. Your usage data never gets sent to third parties or used for advertising.
No Tracking Cookies
Umami doesn't utilize invasive tracking cookies or cross-site tracking. It's purely for understanding how our game is used, not who's using it.
Just the Basics
We do not perform detailed user profiling, behavioral targeting, or data mining.
Questions?
If you have any questions about how we handle your data, want to request deletion of your account, or just want to chat about something, feel free to reach out.
- Our mail: hello@bottomlicense.com
- Alt mail: just@nutted.in
- MochaFox directly: @mochafox
- SuhEugene directly: @suheugene