Privacy

The short version

We collect the minimum needed to run a licensing system: a hash of your license key, a hardware fingerprint, and the IP you activate from. If you create an account (Phase 2), we add whatever you give Discord or our signup form. We do not sell or share your data. Ever.

What we collect

• license key hash — we store an HMAC hash, never the raw key. The raw key is shown once at creation and forgotten.
• HWID fingerprint — a hash of your machine's hardware identifiers, used to bind one key to one PC.
• IP address — logged on activation and on portal actions, for rate-limiting and abuse response.
• preflight specs — Secure Boot / HVCI / test-signing state and similar, captured at activation so we can debug why a build won't run on your machine.
• email / Discord identity — only if you create an account or opt into it.

What we do not collect

We do not run analytics that profile you across the web. We do not load third-party trackers. When we add site analytics it will be privacy-respecting (cookieless, aggregated) and named here.

How long we keep it

License, HWID, and activation data is kept for the life of the key plus 90 days (for abuse and chargeback response), then hashed identifiers are purged. Diagnostics you upload are kept until you ask us to delete them.

Your rights

You can request a copy of your data or its deletion at any time through Discord. We do not process requests by carrier pigeon.

Where it lives

The licensing database is hosted on our provider's infrastructure. Backups are encrypted and held offline. We treat the database as the business — access is logged and limited.