Privacy policy
Last updated: [not set]
Template: needs review before launch
This page is a starting template, not legal advice. Fill in every “[not set]” value and have it reviewed for the countries you sell to before taking payments.
This policy explains what [not set: legal name of the seller] collects when you use Merit Client, this website and its Discord bot, and why.
What we collect
- Account: your email address and a hashed password (handled by our authentication provider).
- Purchases: order, subscription and customer IDs, plan, amounts and status, as reported by our payment provider. We never receive your full card details.
- Licenses and devices: your license status, a random ID the client creates on first activation, the device name you choose, the client version, and activation times. No hardware fingerprints.
- Discord, if you link it: your Discord user ID and username, used to assign your role.
- Security logs: IP address and time of sign-ins, license checks and downloads, used for rate limiting and abuse prevention.
What we do not collect
The client does not send chat, gameplay, file lists, other running programs or hardware identifiers.
Who processes it
- Supabase (database and authentication)
- Vercel (website hosting)
- Our payment provider (merchant of record for payments)
- Discord (only if you link your account)
How long we keep it
[Set retention periods, e.g. security logs for N days; purchase records as long as tax law requires.]
Your rights
You can ask for a copy of your data, correction or deletion. [List the rights that apply where you sell, e.g. under the GDPR, and how requests are handled.] See the contact page.
Cookies
We use only the cookies needed to keep you signed in and secure. No advertising or tracking cookies.