Privacy Policy

We collect and process the information needed to operate the store, verify Discord accounts, deliver purchases, provide licence access, and prevent abuse:

• Contact and purchase data: Your delivery email address, a hashed version of that address, order identifiers, purchased products, licence delivery records, and related transaction status. Payment card details are handled by the payment provider and are not stored by us.
• Discord account data: Your Discord user ID, username, global display name, avatar identifier, server ID, verification status, and encrypted Discord OAuth access and refresh tokens. Discord also provides your verified email address so that your Discord account can be matched to a purchase. Reseller redemption requests the guilds.join permission for a later, explicit security /pull; redemption itself does not add you to a server.
• Licence data: Licence keys and identifiers, entitlements, activation status, expiry information, linked Discord account, and licence administration records.
• Device fingerprints: SHA-256 hashes derived on your device from available system, motherboard, processor, disk, volume, and Windows identifiers. The raw identifiers used to create these hashes are not intentionally sent to or stored by our service. Hashed fingerprints remain pseudonymous identifiers and are treated as personal data where applicable.
• Reviews and support: Information you choose to submit, which may include a Discord username, avatar, rating, review text, proof attachment, support messages, and related identifiers.
• Technical storage: Essential session information and cart details stored in your browser, including the delivery email entered in the cart. Our hosting and infrastructure providers may also process standard security and request logs, which can include an IP address, timestamp, requested URL, and browser information.

We do not store payment card numbers or intentionally collect raw hardware serial numbers. We do not sell personal data.

We process personal data for the following purposes and legal bases, where the GDPR applies:

• to create checkout sessions, match purchases, deliver licences, authenticate users, and provide support where necessary to perform our contract with you;
• to validate licences, enforce device limits, secure accounts, maintain service integrity, and prevent fraud based on our legitimate interests in protecting the service and its users;
• to retain transaction or accounting records where required by law;
• to publish a review or proof that you voluntarily submit, on the basis applicable to that submission and subject to your rights.

We do not sell or rent personal data for advertising. We use it only for the purposes described in this Policy.

We use third-party services to operate the store and software. Depending on how you use the service, personal data may be disclosed to or processed by:

• Sellhub: checkout, payment processing, order handling, and digital delivery;
• Discord: account verification, communication, server access, and support;
• Keygen: licence creation, activation, validation, entitlements, and hashed device fingerprints;
• Hosting and storage providers: website hosting, database hosting, file storage, security, and operational infrastructure.

These providers may act as processors, independent controllers, or both depending on the activity. They may process data outside your country. Where required, transfers are protected using an applicable legal transfer mechanism or another lawful safeguard.

Account, licence, and device-fingerprint records are kept while needed to provide an active licence. Operational records may then be retained for up to two (2) years after licence expiry or termination for security, dispute handling, and fraud prevention, unless a longer period is required by law or is necessary for a specific legal claim.

Transaction and accounting records may be retained for the period required by applicable tax and accounting law. Encrypted Discord OAuth access and refresh tokens are retained while the connection remains authorised and operationally required for verification and an explicit security /pull. They are deleted after a definitive Discord revocation response or an applicable verified deletion request. Reviews may remain public until removed or no longer needed. Browser cart data remains on your device until you clear it or the site storage.

We periodically review retained data and delete or anonymise it when it is no longer needed for the stated purpose.

Depending on your location and the applicable law, you may have rights to access, correct, erase, restrict, object to the processing of, or receive a portable copy of your personal data. You may also lodge a complaint with the data protection authority in your country, including the CNIL in France.

To exercise a right, open a support ticket in our Discord server and provide enough information for us to identify the relevant account or licence. We may request reasonable verification and will respond within the period required by applicable law.

Licence consequences: deleting data that is strictly necessary to authenticate an account or validate a licence may make the licence unusable. This does not remove a legal right to request deletion; we will assess each request and retain only data that we are legally permitted or required to keep.

We use measures intended to protect personal data, including access controls, encryption of stored OAuth tokens, one-way hashing for email matching and device identifiers, and server-side validation. No electronic system is completely secure, so absolute security cannot be guaranteed.

The store and Software are intended only for people aged 18 or older. We do not knowingly offer the service to children. If you believe a child has provided personal data, contact us through Discord so that we can investigate and take appropriate action.

The website uses browser storage for functional purposes such as retaining cart items and the delivery email you enter. Authentication areas may use essential session mechanisms. We do not currently use this storage for behavioural advertising. You can clear browser storage through your browser settings, although doing so may remove your cart or sign you out.

We may update this Privacy Policy when our practices, providers, or legal obligations change. Material changes will be announced through the service or our Discord server, and the effective date above will be updated.

For privacy questions or requests, contact the individual operator trading under the Trigger Discipline brand through our Discord server.