Privacy Policy

What We Collect

We collect the minimum data needed to run our services:

• Discord: ID, username, avatar, and email (for login and notifications)
• Steam: ID, username, and avatar (to deliver items in-game)
• Purchases: Transaction history for delivery and support
• IP Address: For security, fraud prevention, rate limiting, and ban enforcement
• Device & Browser Information: Browser type, user agent, screen resolution, timezone, language settings, operating system, and hardware characteristics (such as CPU and memory capacity) for security and fraud prevention
• Device Fingerprint: We generate a unique device identifier derived from your browser and hardware characteristics (including canvas rendering, WebGL graphics data, audio processing, installed fonts, and GPU information). This is used solely for fraud prevention, ban enforcement, and protecting our community from abuse. This identifier does not track your browsing activity on other websites.

Cookies & Local Storage

We use cookies and similar technologies for:

• Essential Cookies: Session management, authentication, and security. These are required for the site to function.
• Security Cookies: Used for fraud prevention and ban enforcement. These cookies help us identify and restrict access for users who have violated our terms of service.
• Preference Cookies: Remembering your theme preference (dark/light mode) and cookie consent choice.
• Functional Cookies: Stripe payment processing requires cookies to work securely.

We do not use advertising or tracking cookies. By continuing to use our site, you consent to our use of essential and security cookies.

How We Use It

• Deliver VIP perks and purchased items to your account
• Provide support when you open a ticket
• Prevent fraud, chargebacks, and rule violations
• Maintain server ban lists and moderation records
• Detect and enforce bans against users who attempt to circumvent restrictions by using different accounts, devices, or IP addresses
• Enforce rate limits and prevent abuse
• Comply with legal obligations

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your data under the following legal bases:

• Contract: Processing necessary to provide services you've purchased or requested
• Legitimate Interests: Security, fraud prevention (including device fingerprinting and ban enforcement), and service improvement
• Legal Obligation: Compliance with applicable laws and regulations
• Consent: Where required, such as for marketing communications (which we do not currently send)

Third Parties

• Stripe handles payments. We never see or store your card number. Stripe may collect additional data as per their privacy policy.
• Discord for login (OAuth) and community. See their privacy policy.
• Steam for account linking. See their privacy policy.
• Cloudflare for content delivery and DDoS protection.

We do not sell your data or share it for advertising. We may share data with law enforcement if legally required.

International Data Transfers

Your data may be processed and stored in countries outside your residence, including the United States and European Union. By using our services, you consent to this transfer. We use service providers that maintain appropriate safeguards for international transfers.

Data Retention

We keep your account and purchase data as long as your account is active or as needed to provide services. Ban records, chargeback records, device fingerprints, and other fraud prevention data may be retained indefinitely for security purposes. Transaction records are kept for accounting and legal compliance (up to 7 years). You can request deletion of your data, though fraud prevention records and ban-related data may be retained to protect our community.

Data Deletion and Active Services

If you request deletion of your personal data while you have an active subscription or VIP status, these services will be cancelled as we can no longer identify your account to deliver them. No refunds will be issued for the remaining subscription period, as you are voluntarily choosing to end the service by requesting data deletion.

Your Rights

Depending on your location, you may have the following rights:

• Request access to your personal data
• Request correction of incorrect information
• Request deletion (subject to legal/security requirements)
• Request restriction of processing
• Object to processing based on legitimate interests
• Data portability (receive your data in a portable format)
• Withdraw consent where processing is based on consent
• Unlink your Steam account from your profile
• Lodge a complaint with a supervisory authority

For EEA/UK residents, you may contact your local data protection authority if you believe your rights have been violated.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information from our systems.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact

For privacy questions, data requests, or to exercise your rights, contact us on our Discord. We'll respond within 30 days.