Privacy Policy

How Synpixel collects, uses, protects, and discloses personal information when you use our marketplace, download plugins, and verify licenses.

Effective: October 29, 2026•Version 1.1

1. Information We Collect

We collect information directly from you and automatically through your interactions with our storefront and digital products:

  • Authentication & Account Data: When signing in via Discord OAuth, we collect your public Discord user ID, username, avatar hash, and primary email address. We do not receive or store your Discord password.
  • Billing & Transaction Records: When you purchase a plugin, payments are securely processed by Stripe. We collect your billing email address, purchase amount, purchased resource identifier, and Stripe Checkout Session ID. We do NOT collect, process, or store full credit card numbers, CVVs, or bank account credentials.
  • Software Telemetry & DRM Data: To enforce licensing and prevent piracy, plugins protected by DRM transmit technical telemetry during license activation and verification checks. This includes your server IP address, operating system, and hardware identifiers (HWID).
  • Technical Usage Logs: We log standard HTTP server requests, browser user-agents, download timestamps, and error traces to ensure service uptime and security.

2. How We Use Your Information

We use the collected information for the following operational purposes:

  • Authenticating your session and verifying administrator access.
  • Fulfilling orders, generating DRM license keys, and providing download access to plugin binaries.
  • Verifying server network license entitlement via automated licensing servers.
  • Detecting, investigating, and preventing fraudulent payments, chargebacks, and unauthorized software distribution.
  • Responding to support tickets, commission requests, and customer inquiries.

3. Third-Party Service Providers

We partner with trusted third-party cloud infrastructure providers to operate our marketplace. Each provider processes data in compliance with strict security and privacy standards:

Stripe

Global payment processor. Manages PCI-DSS compliant checkout and card processing.

Supabase

PostgreSQL database and OAuth session management hosting.

Cloudflare R2

Encrypted object storage providing authenticated plugin binary delivery.

Licensing Infrastructure

Dedicated software licensing provider managing license keys, HWID verification, and DRM.

4. Data Retention & Account Deletion

We retain purchase and license records for as long as your account remains active to provide perpetual access to your purchased software and future version updates.

You have the right to request the permanent deletion of your account and personal data at any time. Please note that deleting your account will permanently deactivate your license keys and revoke your ability to download previously purchased plugins.

5. Your Rights (GDPR & CCPA)

Depending on your location, you may have legal rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate profile data.
  • Right to Erasure: You may request deletion of your account and transaction telemetry.
  • No Sale of Data: Synpixel does not sell, rent, or trade your personal information to third parties for advertising or marketing purposes.

6. Cookies & Tracking

Synpixel utilizes only essential, strictly necessary session cookies required for authentication and CSRF protection via Supabase Auth. We do not use third-party analytics pixels, tracking cookies, or behavioral advertising cookies.

7. Contact Information

To exercise your privacy rights, request data deletion, or report security concerns: