Privacy Policy
Summary
We collect the minimum data required to run a license-bound service: your email, a hashed password, your license rows, and salted access logs to detect account sharing. We don't run third-party analytics on the loader. We don't sell data. We don't track you across the internet.
1. What we collect
- Account. Your email address, a non-reversible representation of your password, an optional Discord identity if you sign in that way, and the time your account was created.
- License & usage. Which products you own, when they expire, a non-reversible identifier for the device they're bound to, and minimal session metadata while a session is active.
- Access events. For abuse detection: a record of each sign-in, key redemption, and session start, including a non-reversible representation of your IP and the country derived from it. We retain an encrypted copy of the IP itself only for review of confirmed abuse cases.
- Payments. The invoice IDs returned by our payment providers. We never see card numbers or wallet keys — those stay with the provider.
2. What we don't collect
- No telemetry from the runtime: no feature usage, no click heatmaps, no session recordings.
- No crash uploads. If the software crashes, we don't get a dump.
- No third-party analytics scripts (no Google Analytics, no Meta pixels, no session replay) on the website. The only outbound request is to the public Discord widget endpoint.
- No raw hardware identifiers. We see the salted SHA-256 only.
3. Cookies
The marketing site uses no analytics cookies. The customer portal (when shipped) will set a small set of strictly-necessary cookies for the session — no consent banner is required for them under GDPR Article 6(1)(f).
4. Retention
- Account records: kept while the account exists; deleted within 30 days of a verified deletion request.
- License history: kept for two years after the last entitlement expires, for fraud and refund handling.
- Access events: 180 days, then purged automatically.
- Crash reports: we don't store any.
5. Sharing
We share data only with: (a) the payment provider you chose at checkout, to process your transaction; (b) Discord, if you sign in via Discord OAuth; and (c) law-enforcement when compelled by a valid order from a competent jurisdiction. We do not sell data, ever.
6. Your rights
You can request access to, correction of, or deletion of your personal data at any time via Discord DM or the contact channel on this site. We aim to respond within 14 days. EU/UK residents have the right to lodge a complaint with their local supervisory authority.
7. Security
We use modern, industry-standard protections appropriate for a license-bound service. We don't publish specifics — that would just help attackers narrow their targets.
8. Changes
Material changes are announced on the site at least seven days before they take effect.
9. Contact
For privacy questions, DM us in the official Discord at discord.gg/SvXmE7Kqu8.