Last updated: August 2026. This policy explains what personal data we process when you use this website or buy from us, why, and the rights you have. The data controller is [COMPANY LEGAL NAME], [registered address], [country] ("Gametrix", "we"). For any privacy matter, contact us via the contact page or the email in the footer.
1. Data we collect
- Account data: your email address, an optional name, and a hashed password. Accounts are created when you register or automatically when you purchase.
- Order data: order number, product and licence purchased, USD amount, cryptocurrency and amount received, payment-processor transaction ID, order status and timestamps.
- Technical data: IP address, browser/device information and page-view logs, collected for security, fraud prevention and basic aggregate traffic statistics.
- Messages: what you send us via the contact form or email, including your address for replying.
- Cookies: as listed in Section 4.
We never see or store card numbers or bank details — payment happens in cryptocurrency via our processor. Blockchain transactions are public by nature; we do not control that ledger.
2. Why we process it (legal bases, Art. 6 GDPR)
- Performing our contract with you: taking orders, processing payment status, delivering downloads, running your client area, providing support and password resets.
- Legal obligations: keeping transaction records for accounting and tax law.
- Legitimate interests: securing the site (login throttling, audit logs, fraud checks), internal order notifications to our staff, and defending legal claims.
- Consent: analytics cookies (only if you click "Accept all" in the cookie banner) and any optional marketing you explicitly sign up for. Consent can be withdrawn at any time.
3. Who receives data
- Hosting provider operating the server this site runs on.
- Plisio (payment processing): receives the order amount and payment details needed to create and confirm your crypto invoice, under its own privacy policy.
- Email delivery via our mail server, to send you order and account emails.
- Google: if you choose a language in the translator, page text is translated by the Google Translate service; if you consent to analytics, our analytics provider (e.g. Google Analytics) sets its cookies as described below.
- Internal notifications: order events are sent to our team's private Telegram channel to fulfil your order promptly.
Some recipients may be located outside the EU/EEA; where that is the case, transfers rely on adequacy decisions or standard contractual clauses. We never sell personal data.
4. Cookies
- nx_session — essential. Keeps you signed in and your checkout working. Session lifetime. No consent required.
- nx_consent — essential. Remembers your cookie choice. 12 months.
- googtrans — functional. Set only when you pick a language in the translator; remembers it. Removed when you switch back to English.
- Analytics cookies — optional. Set only after you click "Accept all"; used to understand traffic in aggregate. Choosing "Essential only" means they are never set. You can change your mind by clearing this site's cookies, which shows the banner again.
5. Retention
Account data is kept while your account exists. Order and invoice records are kept as long as tax and accounting law requires (typically up to 10 years, depending on jurisdiction). Download links expire automatically. Contact messages and technical logs are kept only as long as needed for their purpose, then deleted or anonymised.
6. Your rights
Under the GDPR you may request access to your data, rectification, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting prior processing. Contact us to exercise any right; we respond within one month. You also have the right to lodge a complaint with your local data-protection supervisory authority.
Note that erasure cannot extend to records we are legally required to keep (e.g. invoices) or to entries on public blockchains, which we do not operate.
7. Security
The site runs over TLS. Passwords are stored only as strong one-way hashes, administrative access is protected by mandatory two-factor authentication, download links are cryptographically signed and time-limited, and administrative actions are recorded in an audit log.
8. Who this site is for
Our products are business software. This website is not directed at children and we do not knowingly collect data from anyone under 18.
9. Changes
We may update this policy; the current version is always published on this page with its date. Material changes will be highlighted on the site.