Privacy Policy

1. Introduction

This Privacy Policy explains what personal data is collected when you use the platform, why it is processed, and the rights you have over it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.

2. Data we collect

• Account data — email address, name (optional), password (stored only as a cryptographic hash), preferred language and currency. If you sign in with a social login provider (e.g. Google or Discord), we receive your email address and basic profile information from that provider.
• Order and billing data — the products you purchase, order amounts, billing country, invoices and payment status. Full card details are handled exclusively by our payment providers and never reach our systems.
• Support data — messages you send to support and information you provide when reporting a problem with an order.
• Technical data — IP address, browser and device information, processed for security, fraud prevention and to operate the platform reliably.

3. Purposes and legal bases

Personal data is processed:

• to perform the contract — creating your account, processing orders, delivering digital products, providing support (Art. 6(1)(b) GDPR);
• to comply with legal obligations — issuing and retaining invoices, tax and accounting rules, responding to lawful requests from authorities (Art. 6(1)(c) GDPR);
• for legitimate interests — preventing fraud and abuse, securing accounts and payments, improving the platform (Art. 6(1)(f) GDPR);
• with your consent, where requested — for example for optional marketing emails, which you can withdraw at any time (Art. 6(1)(a) GDPR).

4. Analytics

The platform uses privacy-friendly, self-hosted analytics to understand aggregate visitor behaviour — pages visited, referral sources, country-level location and general device type. This measurement works without advertising cookies and without cross-site tracking, and the data is stored on our own infrastructure in aggregate form. It is not shared with advertising networks and is not used to build individual profiles.

5. Payments

Payments are processed by established payment institutions (such as card and wallet providers). When you pay, the data required to process the transaction is exchanged directly between you and the payment provider under its own privacy policy. We receive only confirmation of payment, the payment method type and the data needed for bookkeeping — never your full card number.

6. Sharing of data

Personal data is shared only where necessary to operate the service:

• payment providers — to process payments and refunds;
• suppliers of digital products — the minimum order details needed to provision your keys;
• infrastructure and email providers — hosting, databases and transactional email delivery, bound by data-processing agreements;
• authorities — where disclosure is required by law.

Personal data is never sold.

7. International transfers

Where a service provider processes data outside the European Economic Area, transfers rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.

8. Retention

Account data is kept while your account exists and deleted or anonymised after account closure, except where longer retention is required by law. Invoices and related order records are retained for the period mandated by tax and accounting legislation. Security logs are kept for a short, limited period.

9. Your rights

Under the GDPR you have the right to:

• access the personal data held about you;
• rectify inaccurate data;
• erase data ("right to be forgotten"), where no legal retention duty applies;
• restrict or object to certain processing;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your national data-protection supervisory authority.

To exercise any of these rights, contact [email protected]. Requests are answered within the statutory time limits.

10. Cookies

The platform uses only cookies and similar storage that are necessary for it to function: keeping you signed in, remembering your cart, language and currency preferences, and protecting against abuse. No third-party advertising cookies are set. Analytics runs without cookies, as described in section 4.

11. Security

Data is protected with industry-standard measures: encrypted connections (TLS), hashed passwords, access controls, network isolation and monitoring. License keys are stored encrypted and revealed only to the purchaser.

12. Children

The platform is not directed at children. Purchases require you to be at least 18 years old or to have the consent of a parent or guardian.

13. Changes to this policy

This policy may be updated from time to time, for example when new features or providers are introduced. The current version is always available on this page; material changes will be announced on the platform.

14. Contact

For any privacy-related question or request, contact [email protected].