Privacy policy

Data we collect

Account data. When you register we store your email address and a password. The password is never stored in plain text, only a salted cryptographic hash that even we cannot reverse. Your email is used to sign you in, to link your purchases to your account and for essential service messages about your plan.

Machine identifier. The loader binds your licence to one machine at a time using a hardware identifier (HWID) collected when the injector first signs in. This exists solely to prevent a single licence from being shared. You can see a masked fingerprint of the bound machine on your dashboard and unbind it yourself (subject to cooldowns).

Payment records. Payments are processed by Stripe. We never see or store your card number. We keep a record of the purchase (plan, amount, status, period and the processor's transaction reference) so we can grant and support your access.

Discord (optional). If you link your Discord account we store only your Discord user id. It is used to grant the customer role, to post renewal reminders in a private thread, and (for crypto purchases approved through Discord) to deliver your plan. You can unlink at any time from the dashboard.

Anti-bot and security data. Sign-in and registration forms are protected by Cloudflare Turnstile, which processes limited information about your browser to distinguish humans from bots. We also keep routine server logs (such as request timestamps) for security and abuse prevention.

Cookies

We set a single signed session cookie so you stay logged in to the dashboard. We do not use advertising, tracking or analytics cookies, and we do not profile you or sell data to anyone.

How and why we use data

We process data only to operate the service you signed up for: creating and securing your account, enforcing the one-machine-per-licence rule, processing payments and grants, delivering Discord role and reminder features you opted into, preventing fraud and abuse, and meeting legal or accounting obligations.

Who we share data with

We share data only with processors needed to run the service: Stripe (payments), Cloudflare (site delivery and bot protection), our hosting provider, and Discord for the features described above. Each receives only what its function requires. Payment data is held only by Stripe. We do not sell or rent your personal data.

Retention

Account and payment records are kept while your account exists and for up to the period needed for accounting and dispute handling afterwards. Discord ids are removed when you unlink them or close your account. Server logs are kept for a short, rolling window and then deleted.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct or export it, and to object to or restrict processing. You can request removal of all your data at any time via our contact page by email or Discord ticket. We will verify you as the account holder and respond within the legal deadline.

Children

Mystcore is not directed at children. You must be at least 13 years old (or the minimum digital-consent age in your country, if higher) to create an account, and purchases require the consent of a parent or guardian where applicable.

Changes to this policy

We may update this policy as the service changes.

Contact

Questions about privacy? Reach us through our contact page. You may also review our terms of service and refund policy.