Real Members · Legal

Privacy Policy

A straightforward explanation of the information needed to run your account, deliver orders and protect the service.

Last updated: 3 October 2026

1. Who this covers

This policy explains how the operator of real-members.com processes personal information when you browse the site, create an account, purchase a code, apply as a reseller or separately authorise a Discord integration. For privacy questions or requests, email hello@real-members.com.

2. Information we process

Account data includes your email, display name, optional avatar, account identifiers, a protected password hash, verification-code hashes and session records. If you sign in through Discord, we receive your Discord ID, username, verified email and avatar. The Discord access token used only for that sign-in is not retained as part of your website account.

If you separately authorise Discord delivery functionality, the integration may store your Discord ID, username, authorised scopes, access token and refresh token to perform the actions you authorised. This is distinct from signing in to the website. We also process destination server IDs, code and delivery status, order references, support messages and, for reseller applicants, store details and the ownership-verification method they submit. This may include a public code, a privately stored dashboard screenshot, a supporting link or an explanation for manual review. Please hide customer, order and payment information in screenshots before uploading.

When you use the site, our systems or hosting providers may process IP address, approximate country, device/browser details and security logs. At checkout, we process the contact email, selected payment method and transaction status; the payment provider handles sensitive payment credentials. We do not store full payment-card numbers on this website.

If you submit a customer review, we link it to a confirmed package order and store the rating, text and moderation status. Published reviews show the purchased package, purchase date and your purchasing account's name and avatar where available. Previously submitted anonymous reviews retain their anonymous display; new reviews do not offer that option. Guest reviews use a neutral customer profile. Reviews also display your approximate country when available from IP geolocation at submission. Your email and order reference are not published. The private link in an order email authorises that order's review; keep it confidential.

3. Why we use it

We use this information to create and secure accounts, send verification messages, process and support orders, deliver the requested service, review reseller applications, prevent abuse and meet legal record-keeping duties. These activities rely, as applicable, on performing a contract or requested pre-contract steps, our legitimate interests in security and service operation, and legal obligations. Optional processing that legally requires consent will be based on consent, which you can withdraw.

We do not sell personal information. We do not use your Discord credentials for purposes beyond the permissions and service you authorised. We do not make decisions with legal or similarly significant effects solely by automated processing.

4. Service providers and transfers

We share only the information needed with providers that operate the service: hosting and security infrastructure, Supabase for data storage, Discord for account and server integration, email delivery providers for verification and support, and the payment provider selected at checkout. Customer reviews published on our own review page are publicly accessible. Providers handle data under their own terms and privacy notices where they act independently.

Some providers may process data outside your country. Where applicable data-protection law requires it, we use an appropriate transfer mechanism and safeguards. You can contact us for more information about the providers and safeguards relevant to your data.

5. Cookies and device storage

The site uses strictly necessary cookies to keep you signed in and protect verification and social-login flows. A standard full account session can last up to 30 days unless you sign out or it is revoked; shorter verification cookies expire earlier. Opening a private review link sets a necessary, HttpOnly cookie lasting up to 30 days so you can review the purchase without creating an account. Your browser's local storage remembers checkout preferences and recent purchase notifications. You can remove these preferences in your browser settings.

Our application does not currently set advertising or analytics cookies. If we add optional tracking later, we will explain it and obtain consent where required before enabling it. Essential login and security storage does not depend on marketing consent.

6. How long we keep it

We keep account information while the account is active, and retain order and transaction records as long as needed for support, disputes, tax or other legal duties. Verification codes have a short validity period; expired records and security logs are retained only as long as reasonably necessary for abuse prevention and system maintenance. Discord integration tokens are retained only while needed for the authorised function, unless they expire or you withdraw access. We may keep limited records where law requires it or a dispute is ongoing.

7. Your choices and rights

Depending on applicable law, you can request access, correction, deletion, restriction or portability of your personal information, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You can also revoke Discord authorisation in Discord's settings and ask us to remove related integration data. To exercise a right, email hello@real-members.com; we may need to verify your identity before acting.

If you are in the EEA or UK, you may complain to your local data-protection authority. Contacting us first gives us an opportunity to resolve the issue directly.

Email hello@real-members.com

8. Children and changes

The service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us. We may update this policy as the service changes; the current version and its date will be available here. Material changes will be communicated where required by law.