Summary · in one paragraph
lepajee.com is an independent affiliate landing page. We do not run user accounts, we do not accept deposits, we do not sell your data, and we do not profile you. The only personal information we may process is limited technical data your browser sends automatically (IP address, user-agent) and any information you voluntarily send us by email. If you create an account on CSDROP after clicking one of our referral links, CSDROP's own privacy policy — not ours — governs everything that happens on their platform.
Who is the data controller
The data controller for lepajee.com is Lepajee, acting as an individual affiliate/content creator. Contact the controller at [email protected].
What we collect (and why)
Server logs
When you load any page on lepajee.com, your browser sends standard request metadata to our hosting provider: your IP address, user-agent string, the URL requested, the referring page, and a timestamp. This is retained for a short period for security, abuse prevention and infrastructure diagnostics. It is not linked to any identity and we do not build profiles from it.
Affiliate click tracking
When you click through to CSDROP using our referral link, your browser is redirected through CSDROP's own tracking system so they can credit the referral. CSDROP handles that process on their infrastructure, under their own privacy policy — we simply receive, at most, aggregate reporting on the number of clicks and signups attributed to our code.
Contact by email
If you email us, we receive whatever you send (name, email address, the message itself). We use it solely to respond to you. We do not add email addresses to marketing lists — there are no marketing lists.
Cookies & local storage
See our dedicated Cookie Policy for the exhaustive list and how to disable anything optional.
What we do NOT collect
- We do not ask you to create an account. There is no signup on this Site.
- We do not collect your real name, date of birth, government ID, payment information, crypto wallet, phone number or home address.
- We do not run fingerprinting libraries, session recorders, chatbots, or email-capture pop-ups.
- We do not sell, rent or trade data with any third party. Ever.
Legal bases for processing (GDPR)
Where GDPR applies, we rely on the following lawful bases:
- Legitimate interests — for minimal server logs used to keep the Site secure and functional.
- Consent — for any non-essential cookies or analytics, where applicable. You can withdraw consent at any time.
- Performance of a contract / pre-contractual steps — when you email us and we need to reply.
- Legal obligation — where we are required to retain or disclose data under applicable law.
Your rights
If you are in the European Economic Area, the United Kingdom, California, or another jurisdiction granting data-subject rights, you may have the right to:
- Access any personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure of your data ("right to be forgotten").
- Object to or restrict processing.
- Request portability of your data in a common, machine-readable format.
- Withdraw any consent you previously provided.
- Lodge a complaint with your local data-protection authority — such as your national DPA in the EU, the ICO in the UK, or the California Attorney General's office in the US.
To exercise any of these rights, email [email protected]. We'll reply within 30 days.
Data retention
- Server logs are retained for up to 30 days, then automatically purged or rotated.
- Email correspondence is kept only as long as reasonably necessary to answer your question and, where relevant, to preserve a record for legal or dispute-resolution purposes.
- We never keep personal data "just in case".
International transfers
Our hosting and email infrastructure may process data outside the European Economic Area. Where data leaves the EEA, we rely on standard contractual clauses and vendor-level adequacy decisions to ensure equivalent protection. If you'd like the specific vendors and safeguards in writing, email us.
Children
This Site is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has interacted with the Site, contact us and we will delete anything we can trace.
Third parties we rely on
We use a small number of technical vendors to run lepajee.com:
- Hosting provider — serves the pages you're reading, processes server logs as described above.
- Email provider — routes the contact-form address
[email protected]. - Google Fonts — CDN that delivers the typefaces on this page.
- techturm.de — lightweight, privacy-focused third-party analytics. It loads a small script on our pages that counts visits, referrer, device class and approximate location. techturm.de acts as an independent controller for the data the script collects and processes it under their own privacy terms. If you want the script blocked, any standard script-blocker (uBlock Origin, Brave shields, etc.) will stop it from loading.
These vendors see only what is technically necessary to deliver the Site and, where they act as processors, are contractually required to act on our behalf. We do not share personal data with any other third party.
Changes to this policy
If we change this policy we will update the Last updated date at the top. Material changes will be highlighted on the homepage for at least 14 days.
Contact
Data protection, GDPR subject requests, or anything else: [email protected].