Privacy Policy

We collect only what the service needs to function:

• Account data — name, email address, and hashed password, or your Discord/Google profile if you sign in with those.
• Billing data — order history and the last four digits and brand of your card. Full card numbers are handled by Stripe and never reach our servers.
• Device data — a hashed hardware fingerprint, OS version, and hardware summary, used to enforce your license's device limit.
• Usage data — login timestamps, IP addresses, and audit events, retained for security and fraud prevention.

To provide the service: authenticate you, issue and validate licenses, process payments, deliver downloads, and answer support tickets.

To keep accounts secure: detect credential stuffing, license sharing, and payment fraud.

To meet legal obligations: tax reporting and responding to lawful requests.

We do not sell your personal data. We do not share it with advertisers. We do not read the contents of your games or files — the client tunes system settings and does not inspect game data.

We share the minimum necessary data with a small set of processors, each bound by a data processing agreement:

• Stripe and PayPal — payment processing.
• Supabase — database hosting.
• Cloudflare — CDN, DDoS protection, and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.

Account data is kept while your account is open. When you delete your account, personal data is erased within 30 days, except records we are legally required to keep — chiefly invoices and payment records, retained for the statutory period (typically 7 years).

Audit and security logs are retained for 12 months.

Depending on your jurisdiction, you may have the right to access, correct, export, or erase your personal data, and to object to certain processing. Most of this is self-service from Settings; anything else, email us and we will respond within 30 days.

We use a single first-party session cookie to keep you signed in, plus a CSRF token. We do not use advertising or cross-site tracking cookies.

Privacy questions or requests: support@projectxhub.com