Privacy Policy

Learn how we protect and handle your personal information.

Privacy Policy

Last Updated: March 15, 2026

SixEight Design ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website and use our Services.

1. Information We Collect

Information You Provide

We collect information you voluntarily submit:

  • Account Registration: Name, email address, password
  • Commission Submissions: Project briefs, reference files, specifications, and communication
  • Contact Forms: Name, email, message content when you contact us
  • Support Inquiries: Any information you provide when requesting help

Information Collected Automatically

When you visit our website, we automatically collect:

  • Device Information: Browser type, IP address, device type, operating system
  • Usage Data: Pages visited, time spent, clicks, scroll depth, referring URL
  • Cookies: Session cookies and optional analytics cookies (with consent)
  • Discord Integration: If you link a Discord account, we collect your Discord user ID and profile information

Information from Third Parties

  • Payment Gateways: Payment processor data (we do not store full credit card details)
  • Discord: User data from your Discord profile (if connected)
  • Analytics Services: Aggregated usage data from Sentry, Google Analytics, or similar tools

2. How We Use Your Information

We use collected information to:

  • Provide Services: Process commissions, deliver assets, communicate about projects
  • Account Management: Authenticate users, maintain accounts, provide support
  • Communications: Send updates, quotes, delivery notifications, and service announcements
  • Improvement: Analyze usage patterns to improve platform performance and user experience
  • Legal Compliance: Prevent fraud, enforce Terms, comply with legal obligations
  • Marketing (with consent): Send newsletters, announcements, and promotional content

We do not use your information for:

  • Selling to third-party advertisers
  • Targeting you with behavioral advertising
  • Sharing commission details publicly without permission

3. Legal Basis for Processing (GDPR)

If you are in the EU/EEA, we process your data based on:

  • Contractual Necessity: Processing required to fulfill commission agreements
  • Legitimate Interest: Improving services, preventing fraud, analytics
  • Consent: For marketing communications and optional analytics
  • Legal Obligation: Complying with tax, financial, or legal requirements

4. Data Sharing & Disclosure

We share information only with:

  • Service Providers: Cloud hosting, payment processors, email services, Discord (with your consent)
  • Legal Requirements: If required by law, court order, or legitimate law enforcement request
  • Business Transfers: If SixEight Design is acquired or merges, data may transfer to the new entity

We do not sell your personal data to third parties.

5. Commission Confidentiality

Your commission details (briefs, files, specifications) are:

  • Private by default
  • Accessible only to our team members working on your project
  • Never shared without your explicit written consent
  • Deleted upon request after project completion (unless legally required to retain)

If you grant permission to use your completed work in our portfolio, that permission applies only to the final delivered asset, not to your brief or personal communication.

6. Data Retention

We retain information as follows:

  • Active Accounts: Data retained while your account is active
  • Closed Accounts: Personal data deleted within 30 days unless required by law
  • Commission Files: Retained for 1 year after completion for dispute resolution, then available for deletion upon request
  • Backup/Archive: Backups may be retained longer for disaster recovery purposes

You may request data deletion by contacting us, except where legally required to retain (tax, financial records).

7. Data Security

We implement industry-standard security measures:

  • Encryption: Sensitive data encrypted in transit (HTTPS) and at rest
  • Access Control: Limited access to personal data; employees trained on privacy
  • Monitoring: Regular security audits and intrusion detection
  • Incident Response: Breaches reported to affected users and authorities as required by law

However, no system is 100% secure. Transmission over the internet carries inherent risks.

8. Cookies & Tracking

We use:

  • Session Cookies: Required for login and platform functionality
  • Analytics Cookies (optional): With your consent, we use Google Analytics or similar to track usage patterns
  • Third-Party Cookies: Discord, payment processors, and other integrations may set their own cookies

You can manage cookies in your browser settings. Disabling cookies may limit platform functionality.

9. Third-Party Links & Services

Our website links to external services (ArtStation, Discord, payment gateways). We are not responsible for their privacy practices. Review their privacy policies separately.

10. Your Data Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request erasure (right to be forgotten)
  • Portability: Request data in machine-readable format
  • Objection: Opt out of marketing and non-essential processing
  • Withdraw Consent: Stop optional data collection

To exercise these rights, contact us via the contact form or email. We will respond within 30 days.

11. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect data from children. If we learn we have collected data from a child under 13, we will delete it immediately.

If you are under 18, you may have additional rights; please contact us for information.

12. International Data Transfers

If you access our Services from outside our operating region, your data may be transferred internationally. By using our Services, you consent to such transfers. We implement Standard Contractual Clauses or equivalent safeguards to protect your data.

13. California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal data we collect
  • Delete personal data (with exceptions)
  • Opt out of the "sale" of personal data (we do not sell data)
  • Non-discrimination for exercising your rights

To submit a request, use our contact form and specify "CCPA Request."

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or a prominent notice on our website. Continued use constitutes acceptance.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

  • Email: Use the contact form on our website
  • Address: Indonesia
  • Response Time: We aim to respond within 30 days

By using SixEight Design, you acknowledge that you have read and understood this Privacy Policy.