Privacy Policy

Draft — review before publishing. This starter text is a template, not legal advice. Adapt it to your business, jurisdiction and payment providers, then remove this note.

Last updated: [DATE]

What we collect

• Account data: email address, username, password hash (we never store your password in plain text), two-factor settings, and — if you sign in with Google or Discord — the profile identifier and email those providers share with us.
• Order data: products purchased, amounts, payment status and the payment provider's transaction reference. We do not receive or store your wallet's private keys.
• License and launcher data: license keys (stored encrypted), a hashed hardware identifier (HWID), launcher version, IP address and timestamps of logins, used to enforce license limits and prevent abuse.
• Technical data: IP address, browser user agent and security logs (sign-ins, password changes).

Why we use it

To provide and secure your account, deliver and enforce licenses, process payments, prevent fraud and abuse, provide support, and send transactional emails (verification, password reset, order receipts). We do not sell your personal data and we do not send marketing email without consent.

Who we share it with

Only with processors needed to run the service: hosting provider, email delivery provider, payment providers (e.g. NOWPayments, Cryptomus), and DDoS/CDN protection (Cloudflare). We may disclose data when required by law.

Retention

Account data is kept while your account exists. Order records are kept as long as required for accounting and fraud prevention. Security logs are kept for a limited period.

Your rights

You can view and update your account data in Account settings and request deletion of your account by contacting support. Some records (e.g. orders) may be retained where required.

Cookies

We use strictly necessary cookies for sign-in sessions and security. No advertising cookies.

Contact

[SUPPORT EMAIL]