Privacy Policy

Last updated: January 2026

1. Introduction

This Privacy Policy describes how BuiltByOtte ("we", "us", or "our") collects, uses, and protects personal data when you use our website https://builtbyotte.com and related services, including our products such as Paymenter extensions, Pterodactyl addons, and related software.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We may collect the following categories of personal data:

  • Identification data: First name, last name, BuiltByBit ID, email address.
  • Technical data: IP address, browser type, device information, operating system.
  • Location data: Approximate location based on IP address (for analytics purposes only).
  • Transactional data: Purchases of our products made via BuiltByBit.
  • License activity logs: When you request or use a license, we monitor related activity for validation and anti-fraud purposes.
  • Reports: Information we record when dealing with suspected illegal use or license violations.
  • Communication data: Messages sent via email, WhatsApp, or Discord support channels.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To provide and manage your product licenses - Performance of a contract (Art. 6(1)(b) GDPR)
  • To maintain and secure our website - Legitimate interest in website security (Art. 6(1)(f) GDPR)
  • To detect and prevent abuse or fraud - Legitimate interest (Art. 6(1)(f) GDPR)
  • To provide customer support - Performance of a contract and legitimate interest (Art. 6(1)(b) and (f) GDPR)
  • To comply with legal obligations - Legal obligation (Art. 6(1)(c) GDPR)

We do not use your personal data for marketing purposes without your explicit consent.

4. Data Sharing

We only share data when necessary and with trusted third parties:

  • Cloudflare, Inc. - Security and CDN services (IP addresses) - US
  • BuiltByBit - Payment processing and account management - US
  • Cloudflare Pages - Website hosting and deployment - US

We never sell or rent your data to third parties.

5. Cookies and Tracking

Our website uses:

  • Essential cookies for website functionality and security.
  • Analytics cookies (if enabled) to help improve website usability.

You can change or withdraw your consent for non-essential cookies at any time in your browser settings.

6. Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy or as required by law.

For example:

  • Account and license data are kept while your account remains active.
  • Activity logs are retained for up to 12 months for security purposes.
  • Transaction records may be retained longer to meet tax and legal obligations.
  • Support communications are retained for up to 2 years for customer service purposes.

7. International Data Transfers

If data is transferred outside the EU/EEA (for example to the US via Cloudflare or BuiltByBit), we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent safeguards.

8. Your Rights (under GDPR)

As a data subject, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (where applicable)

To exercise these rights or request deletion, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration. This includes HTTPS encryption, restricted access, and secure infrastructure hosted by Cloudflare.

10. Children's Privacy

Our services are not directed toward individuals under 16 years of age. If we learn that we have collected data from a child without parental consent, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on https://builtbyotte.com/privacy. Material changes will be clearly communicated before they take effect.

12. Supervisory Authority

If you believe your data has been handled unlawfully, you can lodge a complaint with your local data protection authority or with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

https://autoriteitpersoonsgegevens.nl

13. Contact

For all privacy matters, please contact us at [email protected].