Last updated: 2026-06-09
When you buy something, we collect your email address and the order details. The email is necessary to send you the download link, the receipt, and any update notifications. The order details are necessary for tax compliance and accounting.
If you sign in to re-download purchases, we store your email and a session token. We don't store passwords. Magic links are single-use and expire in one hour.
If you subscribe to the newsletter, we store your email and a confirmation status.
No analytics. No tracking cookies. No third-party scripts. No fingerprinting. The site has no tracking pixels, no Google Analytics, no Facebook tracking, no Hotjar, no session recording. When you load a page, the request hits the server, the page comes back, and that's it. We have no idea what you clicked on, how long you stayed, or whether you came back.
On a Hetzner VPS in Germany. The database is a single SQLite file. The files are in a single directory. There is no cloud, no CDN, no third-party storage. The data is physically on one server that one person has root access to.
One person. The same person who built the products and runs the site. No employees, no contractors, no analytics vendors, no payment processor employees with read access to our database.
Payment processors (Paddle for cards, BTCPay for bitcoin) see your payment details. We see the order they forwarded to us: an order ID, an amount, and "the customer paid." We do not see your full card number or your bitcoin private keys.
Order records: 7 years (required for tax compliance in most jurisdictions).
Email addresses: until you request deletion or until 3 years after your last purchase.
Session tokens: 30 days, auto-expire.
Magic links: 1 hour, auto-expire.
Download logs: 90 days, then aggregated into anonymous statistics.
Email hello@castlejello.com and:
Request a copy of all data we hold about you (we'll send a .json file within 7 days).
Request deletion of your email and all purchase records (we'll do it within 7 days, except for the records we're legally required to keep for tax).
Unsubscribe from the newsletter (one click in any newsletter email, no login required).
Object to processing or request restriction of processing.
CastleJello is a Blender marketplace for adult professionals. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, email us and we'll delete it.
Your data is stored in Germany. If you're outside the EU, GDPR-equivalent protections still apply. The data does not leave the EU server except to the payment processors as required to complete your transaction.
If we change this policy materially, we'll email buyers and update the "Last updated" date. The previous version will be archived and available on request.
Privacy questions: hello@castlejello.com