Privacy policy
Last updated: September 21, 2026
Data controller
The controller responsible for processing your personal data is [COMPANY NAME]. You can exercise your rights or ask any question by writing to us from a ticket in your account.
What data we collect
We collect your email and, if you share it, your name; your order history; and the IP address you connect from, as a fraud-prevention signal.
What we use it for
We use your data to process your orders and deliver your keys, to prevent fraud, and to send you the alerts you asked for — for example stock or pre-order date notifications.
Who we share it with
Stripe processes payment; we never store your card details. The key supplier only receives what's needed to fulfill your order. Resend delivers the emails about your account and purchases. If you choose to sign in with Google or Steam, we receive the basic data those platforms share to identify you.
How long we keep it
We keep your data while your account is active, plus any additional time required by applicable legal or accounting obligations. Specifically: payment attempts (with no card data) are kept for 180 days; orders and billing data are kept for as long as applicable tax law requires; your account data is kept while it's active, until you ask us to delete it.
Your rights
You can access your data, ask us to correct it, or close your account by writing to us from a ticket in your account. If we don't resolve your complaint, in Colombia you can turn to the Superintendencia de Industria y Comercio (SIC) as the data protection authority; if you're in the European Union, you can turn to the data protection authority of your country of residence.
Security
Keys are stored encrypted at rest, and access to them is logged.
Changes to this policy
We may update this policy to reflect changes in how we handle your data. Changes take effect once published on this page.