Privacy Notice

• We do not collect your email address.
• We do not collect your real name.
• We do not sell, share, or rent data to anyone.
• We store the minimum needed to run your account, and we delete it when you ask us to.

When you register and use the Service we store, on our own infrastructure:

• Your chosen username and a one-way bcrypt hash of your password.
• The UID assigned to your account (when one is allocated).
• Account timestamps (created, last login, last update).
• Your linked Discord ID, if you choose to link one.
• Active and historical license records bound to your account (game, expiry, reset count).
• A bound hardware-ID fingerprint while a license is active.

Payment information is handled entirely by our payment processor (Stripe). We never see or store your card number, expiry, or CVC.

Every field above exists to make the Service work: usernames and password hashes are required to authenticate you; the UID and license records are the product itself; the HWID fingerprint exists to enforce the "one machine per license" rule and prevent account sharing.

Our servers retain short-lived access logs (IP address, route accessed, timestamp, status code) for security and abuse monitoring. Logs are rotated and discarded within 14 days.

We use a single first-party, HttpOnly, secure cookie to keep you signed in. We do not use any analytics cookies, tracking cookies, third-party advertising cookies, or cross-site identifiers.

You may request deletion of your account and all associated data at any time by contacting us in Discord. Deletion is immediate and irreversible; the username will be returned to the public pool, and the UID, if one was allocated, will be re-issued to the next paid registrant in the queue.

You may request a copy of the data we hold about you (a minimal export of the fields listed in §2) via the same channel.

For any privacy question, request, or concern, open a ticket in our Discord server. We do not provide an email address because we do not collect them; using Discord lets us verify you actually own the account you're asking about.