Privacy Policy

• public Steam profile data used for Steam login or profile import;
• account data such as login method, session dates, role, access status and profile settings;
• token balance, token-credit history, exports and repeat-download history;
• order records: selected product, amount, currency, payment method, payment number and status;
• support requests, project data, uploaded media and generated export files;
• first-party product analytics: a random browser visitor identifier, country code derived from the IP address without storing the IP in the analytics event, page path without query parameters, normalized referrer hostname, allowlisted UTM fields, tool, event type and export-result status;
• security and anti-abuse signals, including session identifiers, device/browser characteristics, network information, account links, usage patterns, limit checks and administrative decisions;
• service records such as IP address, browser type, request time, page addresses, errors and security events.

We do not receive your Steam password, full card number, CVC/CVV, private keys or card data that the payment provider keeps on its own secure systems.

Data is processed to operate the account, authenticate users, create orders, credit tokens and plans, process exports, provide downloads, answer support requests, prevent fraud, diagnose incidents and comply with legal obligations.

Data may be shared with Stripe, PayPal, hosting providers, infrastructure services, Steam/Valve for login and public-profile functionality, support administrators, banks, professional advisers and public authorities where required by law.

We do not sell personal data or use Steam profile data for third-party advertising.

Account and ledger data is stored while the account is active or while required for accounting, anti-fraud, disputes or legal obligations. Auth sessions usually last up to 30 days. Repeat-download artifacts are temporary and may expire based on plan retention limits.

Raw first-party analytics and anonymous export-attempt records are normally retained for up to 180 days. The configured period may be shortened. Payment, token, security and authenticated export records may follow separate accounting, dispute, security or legal retention requirements.

You may request access, correction, deletion, restriction, objection, withdrawal of consent or other rights available under applicable law. We may ask you to verify the Steam account or payment order before acting on the request.