| DATA | PURPOSE |
|---|---|
| Email and password hash | sign-in. passwords are stored as scrypt hashes and never in plain text |
| Machine identifiers | licence binding: SMBIOS UUID, system disk serial, GPU, network adapter addresses, CPU. Stored as a weighted set, not a single hash |
| IP address | recorded on sign-in and on each licence check, as a signal for sharing and resale |
| Loader version | so an outdated build can be told to update |
No game memory contents, no screenshots, no keystrokes, no file listings, no browsing history. The loader sends only what is listed above. Nothing about what you do inside a raid is reported.
It's how we see a licence being shared or resold: a licence that signs in from several countries in a week isn't one person. It's stored as a signal, and it's not used to block anyone by location.
Account and licence records are kept while the licence is active, and for a reasonable period after, for chargeback and fraud purposes. Machine identifiers can be reset on request if you replace hardware legitimately, so a licence isn't lost to an upgrade. Open a support ticket on the forum and staff will do it.
Payment processing is handled by the payment provider, which sees your payment details and not your licence. Nothing else is shared, and no data is sold.
This site sets no advertising or analytics cookies of its own. What is set, and why:
- __cf_bm, set by Cloudflare, which sits in front of this site. It is a short-lived bot-management cookie and is how the site stays up under attack.
- flarum_session, set by the forum, scoped to
/forum. It's what keeps you signed in. Without it the forum can't tell one request from the next. - wa_session, set by the licence service when the loader signs in. Stored HttpOnly and Secure, and it expires with the session.
Page fonts are loaded from Google Fonts, so your browser makes a request to Google when you load a page here. No account data goes with it, it's just a font fetch, but Google does see your IP, and it's disclosed here rather than left for you to find in a network tab.
Blocking all of the above will break signing in, and nothing else on the site depends on them.