Privacy Policy
Updated September 23, 2026
Scope
This policy describes how the ncheat.vip storefront handles information for accounts, purchases, license delivery, and support. The store operator administers these records. Payment providers, the licensing service, Discord, and other external services also process information under their own policies.
Account and purchase information
We collect your email address, a securely hashed password, verification status, and account security records when you register. Checkout records include your email address, Discord username, products, amounts, discount codes, order reference, selected payment provider, payment status, and delivery information. License keys and their association with your account are stored so you can access your purchases.
IP addresses and support records
The store records IP addresses associated with registration, sign-ins, failed sign-ins, checkout, and certain account-security actions. Your latest login IP can be stored with your account. HWID reset records include the selected license, order, email, request IP, reason, status, and staff updates. Information you submit in support messages is used to handle your request.
Why we use this information
Information is used to create and secure accounts, verify payments, deliver licenses, show order history and remaining license days, process reset requests, investigate fraud, and provide support. Where applicable privacy law requires a legal basis, order and account processing supports performance of a contract; proportionate security and fraud prevention support legitimate interests; legal recordkeeping supports legal obligations. Consent is used where required for optional processing.
Payments and email
Stripe, PayPal, or NOWPayments receives information needed for the selected payment, such as order references, amounts, and relevant contact details. Card and payment credentials are entered with the provider; the store does not store full card numbers or wallet private keys. Resend processes the recipient email and message content for verification, password resets, and delivery messages. Delivery emails include purchased license keys and order information.
Licensing and Discord notifications
The licensing service at sauth.xyz receives license identifiers for remaining-time checks, generation, and approved HWID resets. Software activation may involve hardware identifiers processed by that service. Configured Discord notifications may include order details, email addresses, usernames, or IP addresses selected by the administrator. HWID reset notifications specifically include the license key, product, website-account email, IP address, and reason, for staff review. Website passwords and authentication tokens are not included in these notifications.
Cookies, browser storage, and embedded media
Essential cookies maintain sign-in sessions. Choosing Remember me can retain authentication for up to 30 days. Browser storage holds the cart, current order reference, and interface preferences. You can clear this information through your browser, which may sign you out or clear your cart. The store does not include advertising analytics in its current implementation. Embedded YouTube media and linked external websites may receive technical data such as your IP address and apply their own privacy and storage practices. Store analytics use a first-party visitor cookie lasting up to 180 days to estimate unique browsers and purchase conversion. The server stores hashed visitor identifiers by day for up to 181 days, without recording IP addresses in these analytics records. Browser Do Not Track and Global Privacy Control signals disable this visitor tracking. When location tracking is enabled, the server temporarily uses your IP address with a local MaxMind GeoLite database to estimate country and city. Only approximate location is saved in analytics; the IP address is not saved in these analytics records or sent to MaxMind for lookup. Store statistics also record storefront page paths, visit entry and last-viewed pages, referring domains, campaign/content tags, and broad browser, operating-system, and device categories. These records are retained for up to 181 days; raw user-agent strings and full referrer URLs are not retained.
Service providers and international processing
Hosting, email, payment, licensing, and support providers process information needed to operate their services. Information may be processed outside your country. The protections and locations depend on the provider and applicable law; contact support for information about your request. Information may also be disclosed where required by law or necessary to investigate misuse and protect legal rights.
Retention
The security activity log is pruned to a maximum of 5,000 events and a 90-day window when the log is processed. Separate account, order, licensing, reset, and audit records do not automatically expire on that schedule. They are retained to provide access and support, resolve disputes, prevent duplicate delivery or resets, and meet applicable recordkeeping obligations. Removal from an admin display may hide rather than delete a record. Contact support to request deletion and review any records that must be retained. External providers have their own retention rules.
Security
Access controls, password hashing, encrypted private records, and administrator authentication are used to reduce unauthorized access. No system or transmission method is completely secure. Keep your account credentials and keys private and report suspected compromise to support.
Your choices and rights
Depending on the law that applies to you, you may be entitled to access, correct, delete, or obtain a copy of your information, object to or restrict certain processing, and withdraw consent where processing relies on consent. You may also have a right to complain to a relevant data-protection authority. Contact support with your request; reasonable identity verification may be needed. Some records may need to be retained for legal obligations, security, or unresolved disputes.
Updates and contact
Updates will be posted on this page. For privacy questions or requests, contact the ncheat.vip team through the support link below. Do not post license keys or other private account information in a public Discord channel; ask for a private support channel.