The short version
- We only collect what we need to sell you a tool, deliver your key and keep it working.
- Your card details go straight to Stripe. We never see or store them.
- No ads, no ad trackers, and we never sell your data.
- Want your data deleted? Open a ticket in our Discord.
What we collect
When you buy
Stripe handles the payment. We receive and keep your email address, what you bought, the price, the currency, the Stripe payment reference, and the license key we made for you.
When you use a tool
Your key locks to the first PC you use it on. To do that, the tool sends us a hardware ID: a one-way code made from your PC's hardware, so we can tell your PC apart without learning anything else about it. For keys and accounts on our dashboard we also keep the IP address of the last sign-in, sign-in times, how many times your PC was reset, and a short log of sign-in events. These help us stop shared or stolen keys.
When you have an account
If you have an account on accounts.toxicaleakz.com, we keep your username and your password, which is stored only as a scrambled hash we can't read back.
When you place a custom order
We keep what you write in the order form, the reference images you upload, and your email, so we can make your pack and deliver it in a Discord ticket.
When you post a review
Reviews posted in the reviews channel of our Discord are shown on our Reviews page. We copy the text, the score and the date, remove @mentions and links, and show only the first letter of your name. Want yours removed? Delete the message in Discord and it disappears from the site within an hour, or ask us in a ticket.
When you visit the site
We count page views as a single total number, with nothing saved about who viewed. The "viewing now" number uses a random ID made by your browser, which our server forgets about 35 seconds after you leave. Like any website, our server sees your IP address when your browser asks for a page.
Why we use it
- To take your payment and send you your key, including a backup copy by email.
- To keep your key working, lock it to your PC, and let support reset it when you change PC.
- To make and deliver custom orders.
- To stop fraud, chargebacks and key sharing. A refunded or disputed payment turns its key off.
- To answer you when you open a support ticket.
We don't send marketing emails. We send your key and order link. If you type your email on the checkout page and don't finish, we keep that email and your cart for up to 30 days and send one reminder with a link back to your cart. The reminder has a link that stops them for good.
Visitor stats: we count page views, which site sent you here (for example Discord or Google) and roughly how many different visitors we get per day. We do this ourselves, with no Google Analytics, no cookies and no ads tracking. Your IP address is never stored; it is only mixed into a daily code that can't be turned back into it.
Live chat: if you use the chat bubble, your messages, the name and email you choose to give, and the page you were on are sent to a private staff channel in our Discord so we can answer. We keep the chat for up to 30 days.
Who we share it with
We use a few services to run the store. Each one only gets what it needs:
- Stripe processes payments and receives your card details directly. See stripe.com/privacy.
- Resend sends the email with your key.
- DigitalOcean hosts our servers and the tool downloads.
- Discord is where support tickets and custom orders happen. New custom orders are posted to a private staff channel.
- Google Fonts serves the fonts on this site, and open.er-api.com provides the exchange rates when you switch currency. Your browser contacts them directly, so they see your IP address.
We never sell your data. We only share it beyond the list above if the law requires us to.
Browser storage
We don't use cookies for tracking. The site saves a few small things in your own browser so it works the way you left it: your cart, your chosen currency and language, today's exchange rates, and the random "viewing now" ID. They stay on your device, and you can clear them any time in your browser settings.
How long we keep it
We keep order and key records for as long as your key is active, because we need them to keep your key working and to help you if you lose it. We also keep payment records as long as tax and accounting rules require. Custom order details are kept until your order is delivered and any follow-up is done.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Open a ticket in our Discord and tell us the email you bought with. Deleting your order records also turns off your key, since we can no longer check it.
Children
Our store isn't meant for children under 13, and we don't knowingly collect their data. If you're under 18, get a parent or guardian's permission before buying.
Changes
If we change this policy, we'll update it here and change the date at the top.
Contact
Questions about your data? Open a ticket in our Discord at discord.gg/toxicaleakz.
Also see our Terms of Service.