Privacy Policy

This site is plain static pages. There is no analytics, no advertising and no third-party tracking script, and nothing is written to your browser for measurement purposes. That is why you see no cookie banner — there is nothing to consent to.

Only when you arrive from the desktop app to open your account page does our API set an HttpOnly session cookie, used solely to keep you signed in for that visit.

Registering in the desktop app creates: a username, a password, the time you registered, and an optional email address. The email is used to contact you personally — about a refund, for example — never for marketing blasts.

We also record a machine code derived from your hardware, to identify the device and to stop the free trial being claimed over and over.

Sign-in records: username, whether it succeeded, IP address, the city and province inferred from that IP, client version, and whether a proxy was used. Used to diagnose login failures and spot unusual sign-ins.

Session records: session id, device id, IP, User-Agent, which client shell and version you are on, creation and last-heartbeat times, plus when and why a session was revoked. Used for the single-device sign-in limit and for troubleshooting.

Heartbeat records: the game account UID in use, client version, timestamp. Used to tell who is online and to steer routing.

When you add a game account to the software we store its game UID, server number, platform type, in-game name and last login time, so the same setup follows you across devices.

So that automation can keep running without repeatedly signing in, we also store that game account's session credentials. They are used only to talk to the game servers on your behalf, for nothing else, and are never handed to third parties.

Buying a licence creates: an order number, the payment channel, the duration and amount, and the order's status and timestamps. For cryptocurrency payments this also includes the chain, receiving address, exact amount and transaction hash — that is the only thing tying an on-chain payment back to your order.

We never see or store your card numbers or your wallet's private keys.

Heartbeat records are kept for 30 days, then cleared nightly. Refresh credentials are kept for 7 days after they stop being valid. The one-time tickets used for the desktop-to-web handoff are kept for 2 days.

Account details, game-account settings and order records are kept for as long as your account exists — order records are also financial and refund evidence. Session records are not currently cleared automatically; we retain revoked session rows for security investigation.

You can ask us to delete this data at any time — see the next section.

We do not sell your data, do not share it with advertisers, and do not use it for targeted advertising. We do not hand your information to third parties except where the law requires it, or where it is necessary to complete a payment or refund you started yourself. Cryptocurrency payments are processed by NOWPayments, which receives the order number, the amount and the payment address it generates for that order — never your password or game data; its handling of payment data is governed by its own privacy policy.

PayPal payments are processed by PayPal, which receives the order number, the amount and the item name so that it can take the payment and handle refunds or disputes. Your payment details — card numbers and the like — stay with PayPal and never reach us; PayPal's handling of that data is governed by its own privacy policy.

You can ask to see the data we hold about your account, to correct anything inaccurate in it, or to delete your account and its data. Write to [email protected] from the email you registered with, or in a way we can verify inside the desktop app.

Deleting an account removes the account details, game-account settings and related logs. Completed order records keep the financial information we are required to hold. We normally complete this within 30 days.

Traffic between this site and the API runs over HTTPS throughout. Database access is limited to the people who need it to run the service.

Please set a password used only here — do not reuse the one from your game, your email, or other sites. That is the single most effective thing you can do to protect yourself.

If this policy is updated, the new version appears on this page with the date at the top. Questions go to [email protected].