CHCreations
Privacy Policy
Last updated: June 2026 · Controller: ChadHendrixs / CHCreations
Data Collected
When you apply for or purchase a commission, I may collect:
- Your username, display name, or real name
- Contact details (Discord username, Telegram handle, or email address)
- Reference materials, descriptions, and preferences you share
- Transaction records (invoice number, amount) from Stripe
Payment card information is handled entirely by Stripe. I have no access to your card number, CVV, or billing address beyond what Stripe optionally surfaces (e.g. a name on an invoice).
Legal Basis (GDPR)
Data is processed on the basis of contractual necessity (Art. 6(1)(b) GDPR) — i.e. to fulfil your commission — and legitimate interest (Art. 6(1)(f)) for keeping transaction records and communicating about your order.
How Data Is Used
Commission data is used solely to fulfil your order, communicate progress, and deliver the finished work. It is never sold, rented, or shared with third parties beyond what is strictly necessary to complete your commission.
Portfolio & Showcase
Finished commissions may be displayed in the gallery on this site or shared on social media as portfolio work. If you'd prefer your commission stay private, let me know at the time of ordering and it will not be showcased publicly.
Data Retention
Commission-related messages and references are kept only as long as needed to complete and support your order, and for a reasonable period after to handle any disputes. You may request deletion at any time (see Your Rights below).
Your Rights
Under GDPR you have the right to:
Access
Request a copy of personal data held about you.
Erasure
Request deletion of your data ("right to be forgotten").
Rectification
Request correction of inaccurate data.
Portability
Request your data in a portable format.
Objection
Object to processing based on legitimate interest.
Restriction
Request that processing be restricted.
To exercise any of these rights, contact me via the Contact page. I will respond within 30 days.
Analytics
This site uses Google Analytics 4 (GA4) to understand how visitors interact with the content. GA4 collects anonymised data including pages visited, time on site, approximate geographic region, and device type.
Analytics is enabled by default (opt-out model). A cookie banner is shown on each page — closing it or continuing to browse counts as acceptance. Clicking Decline stops analytics immediately, deletes existing GA cookies from your browser, and prevents any further tracking. Your choice is stored in localStorage and persists across visits.
Google's data processing is governed by the Google Privacy Policy. Data may be transferred to and processed in the United States under Google's Standard Contractual Clauses.
Cross-site Referral Tracking
Links from CHCreations to its projects include UTM parameters (e.g. utm_source=chcreations). These allow GA4 to attribute which CHCreations page referred traffic to a project. No personal data is transmitted — UTM parameters are traffic-source labels only.
Cookies & Local Storage
This site uses the following storage:
- cc_consent (localStorage) — stores your opt-out choice ("accepted" or "declined"). No expiry; cleared when you clear browser data.
- Google Analytics cookies (_ga, _ga_*) — set on first visit by default. Used by GA4 to distinguish sessions. Expire after 2 years. Clicking Decline deletes these immediately.
No advertising cookies or fingerprinting is used. Project links include UTM parameters for referral attribution — these are URL labels only and set no additional cookies.
Third-Party Embeds
The VRC Content page embeds products from Gumroad. Gumroad's own cookies and tracking apply when those embeds load. Gumroad's privacy practices are governed by Gumroad's Privacy Policy.
Legal Basis (GDPR)
Analytics is processed on the basis of legitimate interest (Art. 6(1)(f) GDPR) under an opt-out model. You may object to this processing at any time by clicking Decline in the cookie banner. Upon objection, tracking ceases and all GA cookies are deleted. You can also install the Google Analytics Opt-out Browser Add-on.
Your Rights
You have the same rights as described in the Commissions section. To request deletion of any analytics data associated with your visits, you can also install the Google Analytics Opt-out Browser Add-on.
To exercise your rights or with any questions, contact me via the Contact page.
Overview
The projects listed here are separate products. Their privacy practices, data storage, and user rights are governed by their individual privacy policies, not this document. CHCreations is the data controller for commission and website data only.
All projects are designed with GDPR principles in mind: data minimisation, purpose limitation, and user rights. Each project's privacy policy details the specific data collected, legal basis, retention periods, and how to exercise your rights.
VRC ID Linker
Collects VRChat user IDs and Discord user IDs to enable age-verification cross-linking between platforms. Data is used solely for the verification and role-assignment function. See the full privacy policy for details on retention, third-party sharing, and your rights.
VRC ID Linker Privacy PolicyVRC Linked
A directory of 18+ verified VRChat communities. May collect server metadata and user interaction data to maintain listings. See the full privacy policy for details on what is stored and your rights as a user or server owner.
VRC Linked Privacy PolicyBurrow Defender
An anti-spam and captcha moderation bot for Discord. May process Discord user IDs, message metadata, and server configuration data to perform its moderation functions. No message content is stored beyond what is needed for spam detection. See the full privacy policy for details.
Burrow Defender Privacy PolicyContact
For privacy questions about any CHCreations project, reach out via the Contact page. For project-specific requests, the individual privacy policies contain dedicated contact information.