Panel: your purchase, your rights and your account

This page describes what the panel API does for a customer who bought a Bastrel plan. It is a technical description. The wording shown to customers on screen (alert, buttons, receipts) is written separately and reviewed by a lawyer before anything is published; this page does not replace it.

Status: written (account erasure, player search, PDF receipts and the operator access trace included). The panel screens come later. Nothing is sold yet.

When the paid plan starts

When a purchase is attached to your account, the panel asks you to choose, with no default:

• Start now (only the buyer can choose it: it is the consumer’s own express request). You request immediate execution of the service before the end of the 14-day withdrawal period. The paid plan starts at the purchase date. You keep your right of withdrawal for the 14 days. If you withdraw, you owe an amount proportional to the service already supplied (see “Withdrawing” below). The box you tick is never ticked beforehand and is kept as evidence of your choice.
• Wait. The paid plan starts 14 days after the purchase date. Until then your servers run in observe mode, as an account with no plan. Nothing is owed if you withdraw. You can switch to “Start now” at any time before; you cannot go back once you chose it.

Until you answer, a purchase behaves like “Wait”. The purchase date is the one signed by Tebex. Your choice is recorded with the time (UTC), the version of the text shown, the purchase and your account, and appears in the audit log. The panel gives you a receipt you can download; no e-mail is sent.

The 14 days run from the paid purchase. If you first used the 7-day free trial, the withdrawal period does not start with the trial: it starts when the trial becomes a paid subscription, on the date of that purchase. The same alert, with the same two choices, is shown when the trial converts to a paid subscription.

A change of rights reaches your server at its next licence renewal, which can take up to 24 hours: after “Start now”, on the 14th day, or after a withdrawal.

Who can withdraw or end a subscription

Withdrawing and ending a subscription are reserved to the buyer: the account that created the claim code which attached the purchase (the one whose code was typed at checkout). Other owners of the same account keep running it day to day (choice “Wait”, the list of purchases, the deletion of the account, reading) but cannot end a subscription or choose “Start now”: the panel answers 403, with a different code when no buyer is known for the purchase.

The right of withdrawal always has a way. If you are not the buyer, or no buyer is known for the purchase, you can still file a withdrawal inside the 14 days, from the panel or from the public page below. It is recorded and acknowledged (HTTP 202), but it changes nothing until the Bastrel operator has checked it against the buyer; once checked, it is applied as of the moment you filed it. The operator can also correct who the buyer is after checking (the buyer is the account that created the claim code, who may not be the person who paid).

Ending a subscription

End my subscription records the buyer’s request; the Bastrel operator passes it on and the renewal stops once it is handled (the cancellation itself is made on the Tebex side). You keep access until the end of the period you paid for; the account and its data stay. The panel confirms on screen and gives a receipt with the date and time of the request and the end date.

A public page lets a buyer end a subscription or withdraw without signing in: the buyer gives the reference of the Tebex purchase and a contact of their choice (an e-mail or a postal address). The contact is used only for this request and is kept with the proof. The page answers the same way whether or not the reference exists, and it is rate limited, per address and overall: when a limit is reached the page answers “too many requests” (HTTP 429) with a delay to wait, gives no receipt and records nothing, so try again later (you can also cancel on the Tebex side). A request made on this page is checked by the operator against the buyer of the purchase.

Requests are recorded and handled by the Bastrel operator. Cancelling the payment itself is done on the Tebex side.

Withdrawing

For 14 days after the purchase, the buyer can withdraw, whether they chose “Start now” or “Wait”. The paid plan ends at once. The panel gives a receipt with the date and time.

• After “Wait” (or without an answer), no service was supplied: nothing is owed.
• After “Start now”, you owe an amount proportional to the service supplied up to the withdrawal. It is an estimate, computed from the reference price of the package (not necessarily the price you paid), the start of the service and the length of the period you paid for, and it is shown on the receipt as an estimate; the operator confirms the final amount. When a figure is missing, the receipt says the amount will be computed by the operator; no figure and no currency is ever invented.
• The refund, minus the amount owed, goes through the operator and Tebex.

Receipts

A withdrawal, a termination and a request to delete the account each give a PDF receipt, sent at once when you ask for it as you act and kept for you afterwards. It holds the content of the statement, the date and the time (in UTC and in the display of your language), the purchase reference and the receipt number. You can download your receipts again at any time, in English or in French, as long as the account exists. The PDF is a durable medium you can keep.

Deleting the account

An owner can ask to delete the account and its data: type the exact name of the account to confirm. The request can be cancelled during 7 days; the erasure is then due within 30 days of the request. Until it is carried out, nothing changes for your servers.

Deleting the account does NOT stop the billing. The subscription is billed by Tebex: end it first (see “Ending a subscription” above), then ask for the deletion.

Once the 7 days have passed, the erasure is carried out automatically (within an hour or so, and well before the 30 days). The 7 days are counted by the server’s clock, not by your browser, and cannot be shortened. Your servers lose access, the account’s selection ends in every session, and the account’s data is deleted: servers and their secrets, staff, detections, the player references of the search, bans and what they cite, the economy journal, configuration versions, the audit log. Bans are deleted, not kept by us. Export them from the panel during the 7 days if you need them (the paginated list exists; the CSV export comes with the panel screens). Bans and the cached licence that your game servers already hold stay on those servers: they are yours.

What we keep, and for how long

What remains after the erasure, and what we keep during the life of the account, is not free of personal data. Each item and its duration:

What	How long
Billing and subscription records of a closed account (the purchase and consent record: Tebex reference, plan, dates, state of the subscription, your choice about immediate execution, the version of the text shown and the box ticked, the withdrawal if any, the requests and their receipts), with the identifiers of the Tebex events of the subscription	10 years after the closure (accounting obligation), then deleted. The Discord identifier of the buyer is erased at the closure
The minimised body of the Tebex events of your subscription, with a derived, non-reversible pseudonym instead of the original identifier	Until 13 months after the subscription ended, then erased
The contact typed on the public page	90 days after the operator handled the request, then erased (a line without the contact stays as an anonymous trace). A request nobody handled: 1 year after reception. Kept longer only while the request is disputed, and 5 years after the handling at most
The trial register (a Discord identifier, to give one trial per person)	12 months
Access of the Bastrel operator to your account data (date, reason, duration, number of reads)	3 years, and you can see it in the panel (see below)
The community-server bot’s state file: the Discord identifier of a former customer who lost the Customer role	30 days after the end of the subscription at most (can only be shortened), so the bot does not retry the removal
An anonymised account entry and the dated trace that the erasure happened (no Discord identifier)	Kept
Backups	Up to 30 days after the deletion

All these durations are counted by the server’s clock, and each deletion is done by a dedicated function, never by a free-form command.

Operator access to your account

The Bastrel operator reads your account’s data only in a support session, opened on your explicit request or for a proven incident, with a reason from a closed list (support request, billing, data-subject request, legal request, incident). Every read is recorded. The panel API lists, for your account (the admin role and above), each session with the day it opened, the reason category, how long it lasted and how many data reads it made (reads of your consumer requests by the operator included). It never shows who the operator was.

Searching a player

Any member of the staff can search a player in the panel by a player reference (the hashed license or token reference that appears in your detections and bans). Raw identifiers and addresses are refused: only references exist in the cloud. Results come from your account only: the detections that cite the reference, the 50 most recent bans linked to it, and a count of its economy transactions.

Lifting a ban from the panel

A moderator or above can lift a ban, with a reason (required). The ban is never deleted: it becomes revoked, with who lifted it, when and why, and this record can never be changed afterwards: the panel shows it exactly as recorded, in UTC. Your servers read the lifting on their next synchronisation (see uplink). A ban identifier alone never gives anyone the right to lift it: your role in the panel does.