Operator and controller: The person or organization responsible for controlling and operating Nowax Cheats is the controller for information processed through the Website to the extent applicable law assigns that role. Until formal entity and registered-address details are published, privacy and legal notices may be submitted through the official support channel. This interim baseline will be updated when those details are finalized.

1. Scope

This policy explains how Nowax Cheats processes information when you visit the Website, create or use an account, purchase or manage a digital license, contact support, use reseller tools, connect Discord, or interact with payment and licensing services. It should be read with the Terms of Service and Sale and Cookie Policy.

2. Information processed

• Account and contact data: username, email, password hash, language, currency preference, Discord identifiers, reseller profile information, and account-security settings.
• Orders and service data: products, versions, license keys, activation and HWID information, balance, invoices, refunds, support history, reviews, referrals, and giveaway participation.
• Security and technical data: IP address, browser/user-agent information, device and operating-system details, timestamps, requested paths, authentication events, fraud indicators, and server logs.
• Store analytics: where optional analytics is enabled, pages, product/funnel events, referral parameters, engagement time, account type, and related pseudonymous event data. Detailed optional analytics is disabled until consent where consent is required.
• Communications: support tickets, messages, attachments, feedback, and correspondence you send to us.
• Payment references: payment-provider transaction identifiers, method, amount, status, and fraud/dispute information. Full card credentials are handled by the relevant payment provider and are not intentionally stored by the Website.

3. Purposes and legal bases

• To create and secure accounts, authenticate users, deliver licenses, provide support, and perform purchases: contract or steps requested before contract.
• To process payments, refunds, accounting, taxes, disputes, fraud prevention, abuse prevention, and lawful requests: contract, legal obligation, and legitimate interests.
• To operate, troubleshoot, improve, and protect the Website: legitimate interests, balanced against applicable rights.
• To run optional storefront analytics or non-essential storage: consent where required. Consent can be changed through Cookie Settings.
• To send non-essential marketing communications: consent or another lawful basis where applicable, with an unsubscribe mechanism.

4. Recipients and providers

Information may be disclosed to hosting, CDN and security providers; email and support providers; payment processors such as the payment method selected at checkout; Discord; upstream licensing or authentication providers; professional advisers; and courts, regulators, or law enforcement when required or reasonably necessary to protect rights. Providers process information under their own notices and contractual instructions where applicable. We do not sell personal information as a business model.

5. International transfers

Providers may process information in countries different from yours. Where a transfer law applies, we aim to use an approved transfer mechanism or another lawful safeguard. The final operator identity and provider list will be added when registration is completed.

6. Retention

We keep information only for as long as needed for the stated purpose, account and license operation, security, dispute handling, accounting, legal obligations, or enforcement. Transaction and accounting records may need longer retention than ordinary support or analytics data. Optional analytics and security-log retention are subject to operational minimization and scheduled deletion or anonymization. Data may be retained longer where a legal hold, fraud investigation, or unresolved dispute requires it.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data, and to withdraw consent for future optional processing. Send a request through official support with enough information to verify the relevant account. We may retain information where required by law, needed to establish or defend claims, or necessary to protect other people. You may also complain to the data-protection authority in your location.

8. Security and children

We use reasonable administrative, technical, and organizational safeguards, but no online service is completely secure. Report suspected compromise promptly. The Services are not directed to children under 18. If we learn that we collected a child’s information unlawfully, we will take reasonable steps to delete it.

9. Changes and contact

We may update this policy as the Website, providers, laws, or operator details change. The revision date identifies the current version. Use the official support channel for privacy requests and include “Privacy request” in the subject. Cookie controls and the current storage inventory are available through the Cookie Policy.