Privacy policy

Last updated [date]

Who is responsible

[Company legal name], [address]. Privacy contact: [privacy email].

What we store

• Account: username, email address and a salted Argon2id hash of your password (we can't read your password).
• Sessions: when you sign in we store a hashed session token, your IP address and your browser's user-agent so you can see and end your sessions.
• Device: a one-way hash of your hardware identifier, to bind a license to one PC. Not the identifier itself.
• Licenses and orders: what you bought, for how long, the amount, VAT and billing country. We never see or store card numbers: payments are handled by the providers below.
• Usage: when you launch a game with the loader and for how long.
• Discord (only if you link it): your Discord user id and display name, to give you your customer role in our server. We never receive your Discord email or password, and the access token is discarded straight after linking. Unlinking removes both.
• Content you create: config profiles and shoutbox messages.

Cookies

We set one strictly necessary cookie, your sign-in session. We don't use advertising or analytics cookies or third-party trackers. Fonts are served from our own domain.

Who receives data

• Stripe (card payments), [BTCPay host] (crypto payments), [email provider] (transactional email).
• [Hosting provider].

How long we keep it

[Retention periods for accounts, orders (tax law may require several years), logs and messages.]

Your rights

[Access, correction, deletion, portability, objection and how to complain to your data protection authority.] You can delete your account yourself from Settings; this removes your configs and remaining license time, while order records we must keep by law are retained.