Privacy Policy

This Privacy Policy explains how the operator of spurdoverse.app and its related software, loader, marketplace and community channels ("Spurdo", "we", "us") collects, uses, shares and protects personal data. It applies to all users of our website, software and services (the "Services"). By using the Services you acknowledge this Policy.

Data controller: the operator of spurdoverse.app. Contact: admin@spurdoverse.app.

1. Data We Collect

1.1. Data you provide

• Account data: username, email address, password (stored as a salted hash only).
• Payment data: order amounts, product purchased, payment method type, transaction or cryptocurrency transaction identifiers, and billing details where required by the payment processor. Full card numbers are handled by our payment processors and are never stored by us.
• Support data: the content of your tickets, emails and messages, and any files or screenshots you attach.
• Community data: your Discord user ID and username if you link or use our community channels, and any content you post there.

1.2. Data collected by the Loader and Software

• Hardware identifier (HWID): a hashed identifier generated from components of your device, which may include your CPU, motherboard, storage drive, GPU, network adapter, BIOS and operating system installation identifiers. We store the hashed value and may store the underlying component identifiers to detect spoofing and to enforce device limits.
• Device and system data: operating system version and build, installed security or anti-cheat software relevant to compatibility, system language and time zone, and the version of the Loader and Software in use.
• Session data: login timestamps, Software launch and exit events, product activated, error and crash reports, and IP address at the time of connection.

1.3. Data collected automatically on the website

• IP address, browser type and version, operating system, referring URL, pages visited, time and date of visits, and device identifiers.
• Cookies and similar technologies, described in section 9.

2. How We Use Data and Legal Bases

We process personal data for the following purposes and, where the GDPR, UK GDPR or similar laws apply, on the following legal bases:

• Providing the Services, creating and managing your Account, delivering Subscriptions and Marketplace items, and binding licenses to your device via HWID — performance of a contract.
• Processing payments and top-ups, preventing fraud, handling chargebacks and disputes — performance of a contract and our legitimate interest in preventing fraud and protecting our business.
• Enforcing our Terms of Service, including detecting account sharing, license abuse, HWID spoofing, ban evasion and other prohibited conduct, and maintaining a blocklist of identifiers associated with terminated accounts — our legitimate interest in protecting the Services, our staff and other users.
• Providing customer and technical support — performance of a contract.
• Maintaining security, diagnosing errors, and improving the Services — our legitimate interests.
• Sending service communications (for example, about your Account, purchases, updates or changes to our terms) — performance of a contract and legitimate interests.
• Sending marketing communications — your consent, which you may withdraw at any time.
• Complying with legal obligations and responding to lawful requests — legal obligation.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, other than automated fraud and abuse detection which may result in account suspension pending manual review.

3. How We Share Data

We do not sell or rent personal data. We share personal data only:

• with service providers acting on our behalf, such as hosting, infrastructure, email delivery, analytics, anti-fraud, customer-support and payment-processing providers, under confidentiality and data-processing obligations;
• with payment processors, aggregators and cryptocurrency payment gateways to complete transactions and to respond to chargebacks or disputes, including providing evidence of delivery of purchased Services;
• with Marketplace Vendors, limited to the information needed to deliver an item you purchased from them;
• with community platforms such as Discord when you choose to use our community channels;
• where required by law, regulation, legal process or governmental request, or to establish, exercise or defend legal claims;
• to protect the rights, property or safety of Spurdo, our users or the public;
• in connection with a merger, acquisition, financing, or sale or transfer of all or part of our business or assets, in which case the recipient is bound by this Policy;
• with your consent or at your direction.

4. Retention

• Account data: for as long as your Account is active, and for 12 months after deletion or last activity, unless a longer period is required by law or for the purposes below.
• Transaction and payment records: for as long as required by tax, accounting and anti-fraud obligations, and for the duration of any chargeback or dispute window, typically up to 7 years.
• HWID, IP addresses, email addresses and payment identifiers associated with accounts terminated for breach, fraud or chargebacks: retained indefinitely in a blocklist for the purpose of preventing ban evasion and fraud, on the basis of our legitimate interests.
• Support communications: 24 months after the ticket is closed.
• Server and security logs: up to 12 months.
• Crash and error reports: up to 6 months.

We may retain data longer where necessary to comply with legal obligations, resolve disputes or enforce our agreements.

5. International Transfers

Our infrastructure and service providers may be located in countries outside your own, including outside the European Economic Area and the United Kingdom, and your data may be transferred to and processed in those countries. Where required by law, we rely on appropriate safeguards such as standard contractual clauses or transfers to countries recognized as providing adequate protection. By using the Services you acknowledge that such transfers take place.

6. Security

We use technical and organizational measures designed to protect personal data, including password hashing, encrypted connections, access controls and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for the security of your own device.

7. Your Rights

Depending on your location, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive a copy of the data you provided in a portable format;
• withdraw consent at any time where processing is based on consent;
• opt out of marketing communications at any time;
• lodge a complaint with your local data protection authority.

To exercise these rights, email admin@spurdoverse.app from the email address associated with your Account. We may ask you to verify your identity. We will respond within the time required by applicable law.

Please note that certain data cannot be deleted where we have an overriding legitimate interest or legal obligation to retain it, including blocklist identifiers retained to prevent ban evasion and fraud, and transaction records retained for legal, tax or dispute purposes.

California residents: we do not sell or share personal information as defined in the CCPA/CPRA, and you may exercise your rights to know, delete and correct through the contact above. We do not discriminate against you for exercising your rights.

8. Children

The Services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will delete it and terminate the associated Account. If you believe a minor has provided us with personal data, contact admin@spurdoverse.app.

9. Cookies and Similar Technologies

We use the following categories of cookies and similar technologies on spurdoverse.app:

• Strictly necessary: session cookies that keep you logged in, remember your cart or Balance session, and protect against cross-site request forgery. These cannot be disabled without breaking the site.
• Functional: cookies that remember your preferences such as language or display settings.
• Analytics: cookies or scripts that help us understand how the site is used, such as page views and error rates. Where required by law, we ask for your consent before setting these.
• Security and anti-fraud: cookies and device fingerprinting used to detect bots, abuse and fraudulent transactions.

You can control cookies through your browser settings. Blocking some cookies may affect the functionality of the Services. We do not respond to "Do Not Track" browser signals.

10. Third-Party Links and Services

The Services may contain links to third-party websites and services, including payment processors, cryptocurrency gateways and Discord. Those services have their own privacy policies, and we are not responsible for their practices.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version on spurdoverse.app with a new "Last updated" date and, for material changes, will make reasonable efforts to notify you through the Services or by email. Your continued use of the Services after the effective date constitutes acknowledgement of the updated Policy.

12. Contact

For any questions, requests or complaints about this Policy or our data practices: admin@spurdoverse.app

(c) spurdoverse.app. All rights reserved.