Privacy Policy

Melatonin.gg Privacy Policy Last updated: 28 June 2025 1. Who We Are Melatonin (“we,” “us,” or “our”) provides downloadable software and related services that modify game behavior. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit melatonin.gg or any site, app, Discord server, or loader we operate (together, the “Services”). 2. Information We Collect Category Examples Source Account & Contact Data Email address, username, password (hashed/salted) You provide directly Purchase Data Order ID, product SKU, license key, payment status (we never store full card numbers) You / Payment processor Usage & Log Data IP address, device ID, OS version, timestamps, crash reports, loader telemetry Collected automatically Cookie & Tracking Data Session cookies, analytics identifiers Browser/loader Support & Community Data Support tickets, chat messages, forum posts, moderation notes You / Moderators We do not intentionally collect “special categories” of sensitive data (e.g., health, biometric data). 3. How We Use Your Information Purpose Legal Basis (GDPR) Typical Examples Provide the Services Contract performance Create accounts, deliver keys, keep loaders functional Process Payments Contract performance; Legitimate interest Verify payment, prevent fraud Customer Support Legitimate interest Respond to tickets, troubleshoot Improve & Secure Services Legitimate interest Analytics, bug fixes, anti-tamper measures Legal / Compliance Legal obligation Tax records, law-enforcement requests Marketing (optional) Consent Email updates (opt-in only) 4. Sharing & Disclosure We never sell your personal data. We share it only: Payment processors (e.g., Stripe, Coinbase Commerce) to complete transactions. Infrastructure providers (cloud hosting, CDN, anti-DDoS). Analytics services (limited, pseudonymised data). Affiliates & subcontractors who help run the Services under strict confidentiality. Legal authorities when compelled by law or to defend our rights. All third-party processors are bound by written agreements that meet GDPR Article 28 requirements. 5. Cookies & Similar Technologies We use cookies and local storage to: Keep you logged in Remember language or theme preferences Generate anonymous usage statistics You can disable cookies in your browser, but parts of the site may not work. 6. International Transfers Our servers are located in 🇳🇱 The Netherlands and 🇩🇪 Germany, but some partners operate in other countries. Whenever we move personal data outside the EEA/UK, we rely on: Adequacy decisions, or EU/UK Standard Contractual Clauses (SCCs) 7. Data Retention Data Type Retention Period Account records While account is active + 3 years Purchase & tax records 7 years (legal obligation) Logs & telemetry 30 days (unless needed for security audits) Support tickets 2 years We erase or anonymise data when no longer needed. 8. Security We employ industry-standard measures such as: End-to-end TLS encryption Bcrypt-hashed passwords Cloud WAF, rate limiting, and bot mitigation Strict least-privilege access controls Regular security audits and binary obfuscation No system is 100 % secure, but we work hard to protect your data. 9. Your Rights Depending on where you live, you may have the right to: Access the personal data we hold about you Correct inaccurate data Delete your data (“right to be forgotten”) Restrict or object to processing Port your data to another provider Opt out of marketing communications Lodge a complaint with a supervisory authority (e.g., Datatilsynet in Norway, ICO in the UK, or your local DPA) To exercise any right, email us at [email protected] with proof of identity. We respond within 30 days. 10. Children Our Services are not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has provided data, contact us and we will delete it. 11. Changes to This Policy We may update this Policy from time to time. If changes are significant, we will notify you via email or a banner on our site. Continued use after changes means you accept the revised Policy. 12. Contact Us Melatonin Privacy Team Email: [email protected] Discord: melatonin.gg/discord (or direct: discord.gg/melatoningg) Disclaimer This Privacy Policy is provided for general informational purposes and does not constitute legal advice. Consult qualified counsel to confirm compliance with all applicable laws.