Privacy Policy

Last updated 2026-06-10

1. What we collect

• Discord ID + username — captured via Discord OAuth on the shop. Used to deliver the license key DM.
• Order metadata — tier, price, payment processor invoice ID, time, IP, user-agent.
• HWID — a SHA-256 of (CPUID + disk serial + MAC + computer name) sent by the loader during auth. Bound to the license so a single key can't be shared across multiple machines.
• Session telemetry — IP + last-seen timestamps + bundle pulls. Kept for fraud + abuse detection.
• Audit log — every meaningful event (auth, manifest pull, blob pull, revoke).

2. What we don't collect

• No game account info. The loader never reads or transmits any third-party game's credentials.
• No payment-method details. NowPayments handles the crypto rail; we receive only invoice metadata + payment confirmations.
• No personally identifying information beyond what Discord OAuth exposes (id + username + avatar).

3. How long we keep it

License + session rows are retained while the key is active and for 90 days after expiry. Audit logs are retained for 12 months for fraud analysis, then truncated.

4. Who has access

Only the operator. We do not sell, share, or rent any data. No third-party analytics, no ad tracking, no Google / Cloudflare / Meta SDKs are present on this site.

5. Cookies

One signed session cookie (bw_session) tracks your Discord login so checkout can be authenticated. One short-lived OAuth-state cookie protects against CSRF during the Discord redirect. No third-party cookies. No tracking pixels.

6. Your rights

You can request deletion of your account data by DMing the operator on Discord with your Discord ID. Deletion removes your license rows + session rows but preserves anonymized audit fingerprints required for fraud detection.

7. Contact

Privacy concerns: open a ticket in the official Discord.