Privacy Policy

01What we collect

Only what is needed to run the store and support you:

• Account data: name, email, and a scrypt hash of your password (never the password itself).
• Order data: what you bought, when, and the Discord handle used for delivery — kept for accounting and refunds.
• Support messages: what you send us on Discord.
• License verification data: the IP binding, hardware fingerprint and loader events recorded when your personal loader activates a product — kept for fraud prevention and support quality, and never sold or shared.
• Technical logs: rate-limit counters and security events, stored in Redis with short TTLs.

02What we never do

We do not sell, rent or trade your personal data. We do not run third-party advertising trackers. We do not collect telemetry from your game servers — metrics features in our plugins are opt-in and stay on your infrastructure. The one exception is the license verification data listed above (IP bindings, hardware fingerprints, loader events), which exists to protect your license and is never sold or shared.

03Where data lives

Store and account data is stored in our MongoDB cluster with encryption at rest; sessions and rate limits live in Redis with automatic expiry. Backups are encrypted and retained for 30 days.

04Cookies

We use one essential cookie: your session token (httpOnly, SameSite=Lax) so you stay signed in. Your cart is stored locally in your browser. No consent banner is required because we run no tracking cookies at all.

05Your rights

You can export or delete your account data at any time by contacting support — open a ticket on the official Discord server (https://discord.gg/kEPvGp8Yz7). Deletion removes your account and support history; anonymized order records are retained only where required by tax law.

06Contact

For any privacy question or GDPR request, open a ticket on the official Discord server (https://discord.gg/kEPvGp8Yz7).