We collect the minimum required to run an abuse-resistant storefront — nothing more.
No full payment-card data, no government identity documents, no messages from private channels outside of ticket transcripts you are a party to.
Solely to deliver licenses, verify receipts, prevent fraud/alt abuse, and produce aggregate store statistics such as revenue totals.
Receipt images are forwarded to our AI provider for verification and to Discord for delivery. Public IP checks use a geolocation/abuse database. No data is sold or shared with advertisers.
Records are retained while a license is active and for a reasonable period afterwards for chargeback defence. You may request deletion of your Discord-linked data by opening a support ticket.
Portal credentials are stored salted and hashed, ticket channels are private by default, and all traffic to the portal should be served over HTTPS in production.