Privacy
No trackers. Just counts.
The RazorReaper website uses no advertising trackers, no analytics cookies, no visitor profiles and no third-party scripts. Buying a licence needs some personal data; the sections below say which, who processes it and why.
Nothing stored on your device
The site sets no cookies and writes nothing to your browser’s local storage. Animations, the before/after slider and everything else run entirely in your browser and are forgotten when you close the tab.
Everything is self-hosted
Fonts, screenshots, videos and scripts are served from this site itself. Your browser does not contact font services, CDNs, video platforms or other third parties while you read it.
Anonymous click counts
The Download and Shop buttons on the home page pass through fixed redirect routes (/go/free and
/go/shop). Each click writes only the aggregate label free_click or
shop_click and the count 1 to a private Cloudflare Analytics Engine dataset.
No personal data, account or device identifier, request URL, IP address, user agent or precise location is written to that dataset, and the site never shows visitor or click totals publicly.
Hosting
Cloudflare delivers and protects this website and may process ordinary network request information as part of those hosting and security services. RazorReaper adds no personal-data analytics on top of that.
Payments by Stripe
Both plans are one-time payments; there are no subscriptions. A buy button on the pricing page (or, where offered, in the app) sends the plan you picked to our payment endpoint on api.razorreaper.app, which forwards you to Stripe Checkout. Payments are processed by Stripe Payments Europe, Ltd. (Dublin, Ireland). In Checkout, Stripe collects your e-mail address, your payment details, the name on them and your billing country (and, where needed, your billing address), and processes device and connection data to prevent fraud. Checkout also has an optional field for your Discord username. After the payment Stripe e-mails you its payment receipt (and, where one is issued, the invoice) to the address you entered. Stripe is responsible for parts of this processing itself; its privacy policy applies to them.
From Stripe we receive what we need to deliver your licence and keep our accounts: your e-mail address and name, the plan, the price and tax paid, your country, the payment status, the payment method (for a card, its brand and last four digits), whether you ticked the checkbox for immediate delivery, the Discord username if you entered one, and Stripe’s customer and payment references. We never see your full card details. Legal basis: performing the contract (Art. 6(1)(b) GDPR) and our tax and accounting obligations (Art. 6(1)(c) GDPR).
Purchase notifications
When a purchase completes, the operator gets a short notification in a private Discord channel with the product, the price, the buyer’s country, the Discord username if one was entered at checkout, the last four characters of the licence key and a link to the payment in Stripe’s dashboard — no name, e-mail address or payment details. A public channel on our Discord server may also show an anonymous line with the product and the price only. Discord (USA) delivers these messages.
Licence data
We store your licence on our own server: the licence key, the plan and, once it runs, its expiry, the name, e-mail address and Discord username (if any) it was bought with, the Stripe references above, for a purchase started in the app the ID of that app installation, and, once you activate it, the identifier of the PC it is bound to (a hardware ID). The app checks the licence against this server while it runs. We keep this data while the licence is active and afterwards only as long as statutory retention periods, for example under tax law, require. Legal basis: performing the contract (Art. 6(1)(b) GDPR).
If you give notice on the Verträge hier kündigen page, we process the type of cancellation, the date you asked for, the e-mail address and, if you enter them, the licence key and the reason to find your contract, carry out the cancellation and confirm it to you by e-mail from our mailbox. The operator gets a short notification in the private Discord channel with the type, the reason, the last four characters of the licence key and the e-mail address shortened to its first letter and domain.
Withdrawing online
If you withdraw from a purchase with Vertrag widerrufen, the form sends your name, your e-mail address, what you enter to identify the purchase and anything you add to our server on api.razorreaper.app. We store your declaration with the date and time we received it and a reference number, e-mail the acknowledgement of receipt to that address from our mailbox, and use the rest to find your purchase and refund it. The operator gets a short notification in the private Discord channel, never with your e-mail address. We keep the request as long as we need it to handle the withdrawal and the refund and to prove that we did. Legal basis: our legal obligations for withdrawals (Art. 6(1)(c) GDPR with §§ 355 and 356a BGB) and performing the contract (Art. 6(1)(b) GDPR).
Discord server security check
New members of the RazorReaper Discord server take a short security check before they can chat. It stops people who were banned from the server from coming back with new Discord accounts (ban evasion). The check runs on its own page at bot.razorreaper.app, not on this website, and only after you click “I agree” there. It processes:
- your Discord user ID and name, and the date your Discord account was created;
- keyed hashes of your IP address and of its network (the /24 range for IPv4, /64 for IPv6);
- a random device ID that the check page keeps in your browser’s local storage (our server keeps only a keyed hash of it);
- your browser type and your country (from the IP address);
- the result of the check.
The check never stores your IP address itself. Our server turns it into a keyed hash (HMAC-SHA-256 with a secret key) straight away; without that key the hash cannot be turned back into the address. If you linked your Discord account to a RazorReaper licence, the check also uses that licence’s key, hardware ID and app installs.
These values are compared only with those of banned accounts. For a banned account we also keep keyed hashes of the IP addresses its linked app installs used in the last 90 days. A match on the device ID, hardware ID, licence or an app install bans the new account automatically. A shared IP address, or a shared network on a new account, only flags it for a moderator, because homes and mobile networks share addresses. Moderators see the result and which banned account matched — never an IP address — and can lift an automatic ban. If you think an automatic ban hit you by mistake, for example because you share a PC or a licence with a banned person, you can ask for a moderator to review it: open a support ticket on our Discord server, and a person, not the check, decides.
Legal basis: our legitimate interest in a safe community where bans hold (Art. 6(1)(f) GDPR). The check page stores the device ID in your browser only after you click “I agree” (your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR); you can withdraw it at any time by clearing the site data of bot.razorreaper.app.
The result goes to a private moderator channel on our Discord server. For a flagged, banned or very new account the message shows your Discord account, its age and, if something matched, the banned account and the kind of match (for example device ID or IP address) — never the IP address or the device ID itself. If the check is switched to monitoring only, moderators instead get your account age and who invited you when you join. Discord (USA) delivers these messages. The reason of an automatic ban names the matched account and the kind of match and appears in the server’s ban list on Discord. Cloudflare delivers and protects the check page at bot.razorreaper.app and carries what you send from it, including your IP address, to our server. We do not share or sell this data beyond that.
On our server we delete the check data 180 days after your last check. For a banned account, the hashes and identifiers linked to it are kept while the ban stands and deleted 30 days after it is lifted. These deadlines do not cover the copies on Discord: the messages in the moderator channel are not deleted automatically and stay until a moderator deletes them, which you can ask us to do (see your rights below). The reason of an automatic ban stays in the server’s ban list on Discord while the ban stands, and in Discord’s audit log for as long as Discord keeps its entries. The device ID stays in your browser until you clear it.
Without the check you can still read the server and open a support ticket. You can object to the check (Art. 21 GDPR) and use your other rights as described under Who is responsible, and your rights.
Where the buttons take you
Download goes to dl.razorreaper.app and Shop to our own pricing page. A buy button continues to Stripe Checkout on checkout.stripe.com (see above). The Discord link opens that service, which has its own privacy policy.
Who is responsible, and your rights
The controller is [to be added], e-mail [to be added]. All provider details are in the Impressum.
You have the right to access, rectification, erasure and restriction of processing, to data portability and to object to processing (Art. 15–21 GDPR). To use them, open a support ticket on our Discord server. You can also lodge a complaint with a data protection supervisory authority.