Privacy Policy

1. Data We Collect

When you register and use our Service, we collect:

• Account data: username, email address, hashed password
• Hardware identifier (HWID): a unique identifier derived from your hardware configuration — used solely for license binding and anti-fraud
• IP address: collected on login and WebSocket connections for security, rate limiting, and abuse prevention
• Activity logs: login events, key redemptions, injection events — retained for security auditing
• Payment-related data: subscription records, key transactions — no card data is stored by us
• User-generated content: support tickets, cloud configs, scripts, media posts, comments

2. Why We Collect This Data

• To create and manage your account
• To authenticate you and deliver the software license (HWID binding)
• To prevent fraud, ban evasion, and abuse
• To send service-related communications (account actions, policy changes)
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Retention

Account data is retained for as long as your account is active. Activity logs are retained for up to 90 days for security purposes. Deleted accounts have their personal data removed within 30 days, except where retention is required by law.

4. Cookies and Session Data

We use a single session cookie (HttpOnly, Secure) containing a signed JWT token to keep you authenticated. We do not use advertising cookies, tracking pixels, or third-party analytics. Cloudflare Turnstile (used on registration) may set its own cookies for CAPTCHA verification — see Cloudflare's Privacy Policy.

5. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Object to certain processing
• Data portability — request an export of your data

To exercise these rights, open a support ticket from your dashboard or contact us directly.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. No system is 100% secure.

7. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via dashboard notification or email. Continued use of the Service after changes constitutes acceptance.

8. Contact

For privacy-related requests or questions, open a support ticket from your dashboard. You may also refer to our Terms of Service.