Privacy Policy

1. Data We Collect

Account

• Name, email address, username, language preference and optional avatar.
• Password — stored only as an Argon2id hash; we can never read it.
• If you sign in with Google, Discord or GitHub: your provider ID, the email the provider shares, and access tokens (stored encrypted) used only to authenticate you.

Purchases and licenses

• Order history, amounts and billing details you provide. We never store card numbers — payments are processed by external providers (e.g. PayPal).
• License activity: license keys, hardware identifiers (HWID), device IDs, Roblox PlaceId/UniverseId/server IDs, IP addresses and timestamps. This is required to enforce license limits and prevent fraud.

Technical

• Download logs (IP, browser, date) for each protected file you download.
• Session data (IP, browser) so you can review and close active sessions.
• Messages you send through the contact or quote forms, including your IP.
• Security and audit logs of sensitive actions.

2. Why We Process It

• Contract: deliver products you buy, issue and validate licenses, provide downloads and support.
• Legitimate interest: fraud prevention, license enforcement, platform security.
• Legal obligation: tax and accounting records of sales.
• Consent: optional communications; you can withdraw it at any time.

3. Cookies

We use only functional cookies: session, authentication ("remember me") and CSRF protection. We do not use advertising or cross-site tracking cookies.

4. Who We Share Data With

• Payment processors (PayPal) — to process your payment; they act as independent controllers of card data.
• Identity providers (Google, Discord, GitHub) — only when you choose to sign in with them.
• Hosting (Namecheap) — servers where the platform and its database run.

We never sell your personal data.

5. Retention

• Account data: while your account exists.
• Orders, invoices and license history: kept as required by Peruvian tax and commercial law even after account deletion.
• API request logs: pruned after 90 days.
• Contact messages: up to 2 years.

6. Your Rights

Under Peruvian Law No. 29733 (and equivalent regulations where applicable) you may request access, rectification, deletion or portability of your data, and object to certain processing. Write to support@panda15fps.com from your account email; we answer within 15 business days. Data tied to fraud prevention or legal retention may be exempt from deletion.

7. Minors

The platform is not directed at children under 13 and we do not knowingly collect their data.

8. Changes

We may update this policy as the platform evolves. Material changes will be announced on the site before taking effect.