Last Updated: 26 September 2026
sh4rkk.com is operated by Alex Karras (sh4rk), an independent developer based in Greece, who is the data controller for personal data processed through this site. You can reach us at support@sh4rkk.com, or on Discord.
We keep this minimal: your email address, display name, and purchase history, so we can maintain your library. When you download a product, our download service records against your email which product and version you downloaded, when, and how many times, so we can tell you when an update is out and apply the download limit. If you leave a review, we store its text and star rating, and, if you add them, a display name, profile image and social link, which are shown with the review when you choose to show your name. Replies you write on a review are stored the same way, with the same name and picture, and so is whether you liked or disliked a review or a reply. When you claim your Discord roles, the Discord username you enter, your account email and the list of products you own are posted to a private moderation channel on our Discord server so a moderator can assign your role. When you download a printable Text Styles template while signed in, your account email and the list of products you own are logged to the same private server, and if you leave a note when unsubscribing, the note and your email address are sent there too. If you pick a display currency, your choice is remembered in your browser and is not stored on our servers. To show converted prices, your browser loads current exchange rates from exchangerate-api.com, which, like any site your browser contacts, sees your IP address.
We also keep a plain daily count of how many pages were opened and how many people arrived through each of our own links. It is a tally, not a record of anybody: one line per day per link holding two numbers, with no IP address, no device information, no identifier and no time more precise than the date. The smallest thing it can say is how many people arrived from a particular video on a particular day, so it cannot describe you or be traced back to you, and it does not need consent.
Google Analytics (provided through Firebase) helps us understand how the shop is used. It sets an identifier in your browser and processes your IP address, which is personal data, so it only runs after you accept it in the cookie banner. If you decline, it does not run. We also use Vercel's analytics, which is cookieless and does not identify you, to count page views. We do not use analytics to build advertising profiles.
Accounts are managed through Supabase Authentication. You can sign in with email and password or with Google. Your account data is used to give you access to your library and is not sold or used for advertising.
Strictly necessary storage, which is always on, keeps you signed in and remembers your cookie choice and display currency. This is kept in your browser's local storage, not in a cookie. On the documentation pages, a sidebar_state cookie remembers whether the sidebar is open, for 7 days. None of this needs consent.
Two first party cookies, sh4rk_src and sh4rk_lp, record which link brought you to the site and which page that link pointed at, so we can tell which video or post led to an order. They hold a YouTube video id or a short label plus a page address, never your name or your email. They are first party only and cannot follow you to any other website. When you start a checkout, their values are passed to Lemon Squeezy with your order and come back to us with it, and we keep them on that order record next to your email address, so we can tell which video or post led to the sale. Both last 90 days, and only the first link is kept, so arriving later through a different link does not overwrite it. Clearing your cookies removes them.
Analytics cookies (Google Analytics) are only set if you accept them in the banner. You can change your mind at any time: the "Cookie Settings" link in the footer of the shop and product pages reopens the banner, so withdrawing consent is one click, the same as giving it.
Downloading a product using the admin owner's own email, or opening the admin dashboard, can have technical details attached for security: your IP address, browser and device information, and the time of the request. These are hidden, admin only features. Browsing or downloading the site normally never attaches any of this. It exists only to investigate fraud and abuse, such as someone using the admin email to get a product without paying. It is not used for marketing or profiling, is not sold or shared with anyone, and is not accessible to the public.
We do not sell your data. We share only what is necessary with service providers who process it on our behalf:
Some of these providers are based outside the European Economic Area, including in the United States. Where that is the case, the transfer is covered by an adequacy decision or by Standard Contractual Clauses, so your data keeps an equivalent level of protection.
Account and library data is kept for as long as you have an account. Transaction records are kept for as long as tax and accounting law requires. Review content stays published until you ask us to remove it. If you subscribe to emails, your address is kept until you unsubscribe.
If you are in the EU or EEA you have the right to access your data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent at any time. To exercise any of these, contact us at support@sh4rkk.com, or on Discord. You can also request full deletion of your account and its data at any time; some transaction data may be retained where the law requires it.
If you believe we have mishandled your data, you have the right to complain to your local data protection authority. In Greece this is the Hellenic Data Protection Authority (Hellenic DPA), at dpa.gr.
We may update this policy. The date at the top reflects the latest version, and continued use of sh4rkk.com after a change means you accept the current version.