Privacy Policy
Last updated: 02.11.2026
1. Who's responsible for your data
LimitedHub is the data controller for the personal data described below. For anything privacy-related, contact us at limited0hub0business@gmail.com.
2. What we collect
| Data | When |
|---|---|
| Name, username, email address, date of birth | When you register an account |
| Password | Stored only as a hash by our auth provider (Supabase) - we never see or store it in plain text |
| Profile photo | If you sign in with Google, or upload one yourself |
| Creator / freelancer profile (bio, skills, tools, socials, portfolio pieces, listings) | If you set up a creator profile or sell on the marketplace |
| Payout details (PayPal email or name and bank account number / IBAN, sales, commission and payout records) | If you sell on the marketplace and request a payout - so we can send your earnings |
| Purchase details (Gumroad sale ID, product, price, currency, buyer email) | When you buy a product or tutorial - sent to us by Gumroad after the payment |
| Messages and applications (name, email, project details, budget, attachments, links) | When you use "Start a Project", apply for a job or apply as a freelancer/creator |
| Anonymous visit statistics (page address, referring site, campaign tag, device type, browser, operating system, language, screen width, page load time, whether you were signed in) | Automatically on each page view - no name, email, user ID or IP address is stored with it |
| Error and bug reports (error message, page address, browser and device details, recent actions on the page such as clicks and failed requests, your user ID if signed in, and anything you type into the report) | Automatically when something breaks on the page, or when you send a report with the "Report a bug" button |
| Basic technical data (IP address, browser type) | Automatically, via our hosting provider's server logs |
| Cart, wishlist, cookie choice, visit session ID | Stored in your browser's local/session storage |
We don't use advertising trackers, and we don't sell or share your data for advertising.
3. Why we collect it (and on what legal basis)
- To run your account and deliver what you bought - sign-in, your profile, your listings, and unlocking the products and tutorials you purchased. Basis: performance of a contract (Art. 6(1)(b) GDPR).
- To reply to your inquiries and applications - project requests, job and creator applications. Basis: steps taken at your request before entering into a contract (Art. 6(1)(b)).
- To keep the site working, secure and improving - error reports, bug reports, anonymous visit statistics and abuse prevention. Basis: our legitimate interest (Art. 6(1)(f)).
- To link page views into one visit - only if you choose "Accept All" in the cookie banner, a random visit ID is attached to page views for up to 30 minutes of activity. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
- To email you - account and order emails are always sent; product news and offers only if you switch them on in Settings. Basis: contract / consent.
- To pay creators - calculating each creator's share of sales and sending it by PayPal or bank transfer. Basis: performance of a contract (Art. 6(1)(b)).
- To keep records we're required to keep - e.g. sales records for accounting. Basis: legal obligation (Art. 6(1)(c)).
4. Who else sees your data
We use a small number of service providers ("processors") to run LimitedHub. We don't sell your data to anyone.
| Provider | What for |
|---|---|
| Supabase | Database, authentication and file storage - hosted in the EU (Ireland, eu-west-1) |
| Gumroad | Checkout and payments. Gumroad sells the product to you as the merchant of record and handles your payment details under its own privacy policy - we never see your card details |
| Optional "Continue with Google" sign-in, and the fonts used on this site (Google Fonts) | |
| YouTube, Instagram, TikTok | Embedded videos in portfolios and listings - these load only when a page contains such a video, and the platform may set its own cookies under its own policy |
| Our hosting provider (VH.pl) | Serving the website and keeping standard server logs |
Some of these providers (Google, Gumroad, YouTube, Instagram, TikTok) may process data outside the EEA. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. How long we keep it
- Account data - for as long as your account exists. If you ask us to delete your account, we remove your personal data within 30 days.
- Purchase and payout records - as long as accounting and tax law requires (usually 5 years), even after account deletion.
- Inquiries and applications - until the conversation or recruitment is finished, and at most 12 months after that unless you agree otherwise.
- Anonymous visit statistics - up to 12 months.
- Error and bug reports - up to 12 months, usually much less once the problem is fixed.
6. Cookies & local storage
LimitedHub uses cookies and browser storage that are needed for the site to work: keeping you signed in, remembering your cart and wishlist, and remembering your cookie choice itself.
We also count page views anonymously so we know which pages people use and where they come from. If you choose "Accept All" in the cookie banner, a random visit ID (not linked to your account or identity) is kept in your browser and sent with page views for up to 30 minutes of activity, so several page views can be counted as one visit. If you choose "Necessary Only", page views are still counted anonymously, but without that ID. You can change your choice at any time by clearing this site's data in your browser.
7. Your rights
If you're in the EU/EEA (or a similar regime applies to you), you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data ("right to be forgotten").
- Ask us to restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw your consent at any time, without affecting processing done before.
- Lodge a complaint with your data protection authority - in Poland that's the President of the Personal Data Protection Office (UODO).
To exercise any of these, email limited0hub0business@gmail.com. We'll reply within 30 days.
8. Children's privacy
LimitedHub isn't directed at children, and you must be at least 16 to create an account (see Terms of Service).
9. Changes to this policy
We may update this policy as the site evolves. We'll update the date at the top whenever we do, and tell you by email or on the site if a change is significant.
10. Contact
Questions about this policy or your data? Email us at limited0hub0business@gmail.com.
