Who operates the website
qLabs is operated by an individual in Slovenia publicly known as 8qBIT. For privacy requests, contact contact@8qbit.me. This notice describes the portal's processing; independent sellers, Discord and payment providers are responsible for their own processing where they decide its purposes and means.
We do not sell customer data
We do not sell customer personal data or rent customer mailing lists. This does not mean information is never shared: service providers, counterparties and authorities may receive information for the specific purposes explained below. We do not treat use of the website or acknowledgement of necessary cookies as consent to marketing or unrelated processing.
Information and purposes
- Accounts and access: Discord identifiers, usernames, avatars, membership/role information, login credentials in the form of OAuth tokens, access entitlements and account settings let us authenticate users and provide account services. We do not receive your Discord password. Username/password sign-in is disabled.
- Activity and public content: Resources, descriptions, profiles, reviews, discussion, follows and related interactions provide the features you use. Material submitted to public areas may be visible to other users and visitors. Do not post private contact details or secrets there.
- Transactions: Purchase references, amounts, payment status, buyer/seller identifiers and payment-provider notifications support access delivery, accounting, disputes and fraud prevention. Notifications may contain payer contact details. Card entry and payment authorisation occur with the payment provider, not a qLabs card form.
- Security and support: IP addresses, request/error information, timestamps, moderation history, reports and communications help protect the service, investigate faults and handle complaints. Do not put passwords or unnecessary sensitive data in a report.
- Legal reports: Submitted links, descriptions, copyright-work details, signature and contact information are available to administrators handling the case. Child-safety reports do not collect the identifying form fields. Only the case reference, status, dates and reporter-facing admin comments are available through the private tracking link. Anyone holding that link can view those updates. The original report and internal notes are not included.
We process information as necessary to provide services you request (contract), comply with applicable legal obligations, and pursue legitimate interests in security, abuse prevention, service reliability and resolving claims, balanced against individuals' rights. Where consent is required, it must be obtained for that specific purpose and may be withdrawn. A report submission is not consent to unrelated advertising.
Recipients and international processing
Authorised administrators and hosting/infrastructure providers may access information needed to operate and secure the service. Sellers and buyers receive transaction or contact information needed to perform their agreement. Discord and payment providers receive information when you use their services. Public content is accessible to its audience. Report information may be disclosed to an affected party, legal adviser or authority where necessary for a fair investigation, legal claim or legal obligation; it is not automatically published to the seller.
Pages may load styles, scripts, avatars or resource media from external providers, including Tailwind's CDN, jsDelivr, cdnjs, Discord and author-selected media hosts. Requests to those services can reveal your IP address and browser/network information even without a cookie. The legal-report submission and tracking pages use local assets to reduce unnecessary disclosure. Third-party services have their own privacy practices and may process information outside the EEA. Applicable international-transfer safeguards must be used where required; contact us for information about providers and safeguards relevant to your request.
Retention
Account data is kept while needed for the account and requested services. Published material remains until removed or otherwise retained under its applicable licence or legal obligation. Transaction, moderation and legal-report records are kept as needed for applicable accounting duties, unresolved cases, fraud prevention and legal claims. These criteria, rather than a promise of immediate deletion, determine retention; information must not be retained indefinitely without a continuing purpose. Backups may persist until their normal replacement and access must remain restricted. Contact us for the retention criteria applicable to your records or to request deletion.
Legal-report rate limiting uses a keyed hash of the connecting IP address, not a public identifier. Expired hourly limit records are cleared on subsequent submissions. Report tracking secrets are stored as hashes. Losing a private tracking link does not make the report public or grant access by guessing a sequential case number.
Security and passwords
Discord performs login. qLabs does not store user passwords and therefore does not claim to encrypt passwords it never receives. Session tokens are signed, and login cookies use HttpOnly and SameSite protections. Secure-cookie behaviour depends on the configured HTTPS deployment. Signing is an integrity check, not encryption of all account data. We do not claim that all database fields or backups are encrypted, that every external resource is safe, or that these measures certify full compliance. Operational access control, patching and appropriate security remain necessary.
Your rights
Where applicable under the GDPR, you may request access, correction, erasure, restriction and data portability; object to processing based on legitimate interests; and withdraw consent without affecting prior lawful processing. These rights have legal conditions and exceptions, including records needed for legal obligations or claims. We may request proportionate identity verification to avoid disclosing another person's information. Requests should be sent to contact@8qbit.me; we will respond within applicable statutory deadlines, normally one month, explaining any permitted extension.
You may complain to the Slovenian Information Commissioner or another competent data-protection authority. Contacting us first is not required. We do not use this notice to waive your rights or authorise solely automated decisions with significant effects without applicable safeguards. If required information is not supplied, certain account, purchase or formal-notice functions may not be possible; public browsing and general reporting remain available.
Cookies and browser storage
qLabs currently uses necessary cookies rather than optional advertising or analytics cookies:
| Name | Purpose | Duration |
|---|---|---|
session |
Keeps a requested Discord login active | Normally 7 days; configurable by the operator, and removed on logout |
oauth_state |
Checks the integrity of the Discord login handoff | Up to 5 minutes; cleared after the callback |
qlabs_cookie_notice |
Remembers acknowledgement of this necessary-cookie notice | 180 days |
The cookie notice does not authorise optional tracking. No optional qLabs cookie categories are currently enabled. If optional tracking is added, it must stay off until any required informed consent is obtained, with a genuine refusal/withdrawal option. Necessary cookies do not require the same consent as optional tracking. You can reopen the notice using Cookie settings in the footer, or clear cookies in your browser. Blocking login cookies prevents sign-in but does not require you to give up public browsing.
Third-party sites opened through links, Discord sign-in or payment flows operate independently and may ask for their own cookie choices. This notice does not accept those choices for you.