Privacy Policy
The data we keep about you, the reasons we keep it, and how to have it removed.
1. What we store
Your account: email address, optional username and your password — the password only as a bcrypt hash, so nobody, us included, can read it back in plain text.
Your orders: the products and plans you bought, the amount and currency, and where each order stands. Card and crypto details go straight to the payment provider; your full card number never reaches us and is never kept by us.
Your licences: every key we have given you, plus the hardware ID each one is locked to.
Technical records: server logs with your IP address, the page or endpoint requested and the time, kept to protect the service and spot abuse.
2. What we use it for
Running and protecting your account, delivering and checking licence keys, answering support requests, catching fraud, key sharing and abusive chargebacks, and keeping the books we are legally required to keep.
Your personal data is never sold, and advertisers never get it from us.
3. Cookies
There is a single cookie, cs_token, and it is essential: it keeps you signed in. It is marked httpOnly, so no script on the page can read it, and without it you would be logged out on every visit. No advertising cookies, and nothing that follows you to other sites.
4. Who else handles it
Only as much as each job needs goes to: the payment providers that take your money, the hosting and database provider that runs the shop, and the storage provider that serves downloads and images. They act only on our instructions.
5. How long we keep it
Account and order records stay while your account is open, and after that for as long as accounting rules and fraud prevention demand. Server logs are overwritten after a short period.
6. What you can ask for
You can ask to see the data we hold on you, have mistakes corrected, have your account and its personal data erased, or receive a copy in a portable format.
Email [email protected] from the address registered on the account and you will hear back within 30 days. Erasing the account cancels every active licence key on it and does not come with a refund.
7. Keeping it safe
Passwords are hashed, the session cookie is httpOnly, admin endpoints are locked behind role checks and every connection is encrypted over HTTPS. No setup is bulletproof; should a breach touch your data, we will tell you.
8. Minors
Nothing we offer is meant for people under 18, and we never knowingly collect a minor's data.
Contact
Something here unclear? Email [email protected] and we will explain it.