Privacy
Last updated 9 November 2026
This page says what LECASTLE keeps when you use our web shop (rezzmall.com, also shop.slecastle.com), LECASTLE Assistant (our bot lecastlemodel in Second Life and the chat on our pages) and the LECASTLE STYLE HUD (Media and Classic), why, where, for how long, and how to see or delete it. HANGER, our wardrobe HUD, has its own page: wear.slecastle.com/privacy.
Who is responsible
LECASTLE is a Second Life brand run by its owner, thefrankcastle Resident, who decides how this data is used (the data controller). Contact for any privacy question or request: IM thefrankcastle in Second Life, or open a ticket by writing to lecastlemodel in Second Life or using the chat on this site. We answer within 30 days, usually much sooner.
Where the data is
Our servers are rented from Hostinger in the United States (Phoenix, Arizona). Nightly backups are kept for 14 days on that server and up to 60 days on the owner's private computer. If you are in the EU/EEA or the UK, this means your data is handled outside it; we keep it to the minimum below, the servers are locked down (encrypted connections, password-protected admin, no public access to the data), and you can ask us to delete it at any time.
What every web page receives
When your browser (or the media browser inside Second Life) opens one of our pages, our server receives what every website receives: your IP address, the time, the page asked for, the browser type (user agent) and the page you came from. These go into the normal web server logs, which are deleted after 14 days.
Our pages also load fonts from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), and the LECASTLE STYLE HUD - Media page loads a script library from Cloudflare cdnjs. Those services receive your IP address and browser type when the page loads, under their own privacy policies. We use no advertising, no third-party analytics and no tracking pixels.
LECASTLE STYLE HUD
Media version
The Media HUD shows a page from look.slecastle.com in Second Life's media browser, so it receives what every web page receives (above). To work, it keeps: your avatar key and public avatar name, which LECASTLE outfits you own and wear, the colours and looks you save, the settings of the HUD, your AI credits, short anonymous usage counts (which buttons are used) and, if you use them, the AI style suggestions and photos you ask for. The page keeps its own settings in your viewer's browser storage (no tracking cookies).
Classic version (no media)
The Classic HUD opens no web page. Its scripts ask our server for the colour textures through Second Life itself (llHTTPRequest), so our server only sees the address of the Second Life region server, never your IP and never your browser. It sends your avatar key and the LECASTLE outfit you are colouring. If you prefer this, wear the Classic HUD and take off the Media one; both change the same outfits.
Web shop and LECASTLE Assistant
| What | Why | How long |
|---|---|---|
| Buy now and cart orders: your Second Life name and avatar key, the pieces, the price, the time, the IP address the order came from, and the payment record from Second Life | To ask the price, deliver the piece, send it again later, and stop abuse and fraud | The IP address: 2 days. The order: the last 3,000 orders (a few months); payment and delivery records are kept as our sales history |
| My LECASTLE: a sign-in cookie, your web balance and its history, wishlist (and its share link if you turn sharing on), review and invite rewards | To run your account | Sign-in: one year after your last visit. The rest: while you have the account, or until you ask us to delete it |
| Invite links: the IP address of the visit | To stop people inviting themselves | With the invite record |
| Share with a friend in Second Life: who shared which piece with whom; "Stop shares to me" | To stop flooding | 30 days; a stop is kept until you ask |
| Visits: a random visitor number kept in your browser, the pages and pieces seen, where you came from, and your country (looked up locally; the IP itself is not stored) | Our own visit counts | Kept as daily statistics |
| Chats with LECASTLE Assistant (Second Life IMs and the chat on our pages) and tickets; for the chat on our pages, also the IP address (deleted after 2 days) | To answer you, continue a conversation and solve problems | Until the matter is closed and kept as support history; ask us to delete them |
AI: LECASTLE Assistant writes its answers with an AI service: Anthropic (Claude), with Google (Gemini) as a backup. The text of your message and the facts needed to answer it (for example your order or the piece you ask about) are sent to make the answer; they are not used to advertise to you.
Your browser keeps (not on our server): the light/dark theme, your cart, a short summary of your account for a fast page, the chat's conversation number and the visitor number above. Clearing your browser's site data removes them.
Why we may use it (legal basis)
- To give you what you asked for (a purchase, a delivery, your account, the HUD you wear, an answer): the contract with you.
- To keep the service safe and working (server logs, stopping fraud and floods, our own visit counts): our legitimate interest, kept as small and as short as we can.
- Optional things you choose (sharing your wishlist, sharing a piece with a friend, AI style suggestions): your choice, which you can undo.
We never sell your data and never share it with advertisers. Second Life itself (Linden Lab) handles your avatar, payments and IMs under its own policy.
Your rights
You can ask to see what we keep about you, to correct it, to delete it, to limit or object to its use, and to get it in a file. Ask through the contacts above; we may ask you to write from the avatar it is about, so nobody else can ask for your data. Deleting your data ends things that need it (your web balance, your saved looks). If you are in the EU/EEA or the UK you can also complain to your data protection authority.
Changes
When what we keep changes, we change this page and its date.