1What we collect
Only what running the shop and the software actually needs:
- Your email address — to send your key and to answer you.
- Your Discord username — so support can find you where most of our customers already are.
- Order records — what you bought, when, how much, and which keys were issued.
- A gift card code, and a screenshot if you send one — only if you pay by gift card. Both are kept with your order so we can redeem it and settle any dispute about it.
- A hardware identifier — a fingerprint derived from your machine, used to bind a licence to one computer.
- Technical data — IP address and basic request information, kept in server logs.
We do not ask for your real name, your postal address, or your date of birth.
2What we never see
Card numbers never touch this site. Card payments happen on Stripe's own pages and crypto payments on Plisio's. Gift cards are bought wherever you choose to buy them, so that card never comes near us either — all that reaches us is the code you send. We receive confirmation that a payment settled and the amount — nothing that could be used to charge you again.
3Why we collect it
- To deliver the key you paid for and let you re-open your order.
- To stop one licence being shared across many machines.
- To answer support requests and reply to your emails.
- To detect fraud, chargeback abuse, and attacks on our systems.
- To meet legal and tax obligations.
We do not sell your data, and we do not use it for advertising.
4Cookies and local storage
The storefront keeps your basket in your browser's local storage so it survives a refresh, and remembers your last order reference so the order page can find it if you lose the link. Both stay on your device.
The admin panel uses a session cookie so staff stay signed in. There is no advertising or cross-site tracking on this site.
5Who else sees it
A short list, and only what each one needs to do its job:
- Stripe and Plisio — to take payment.
- Resend — to deliver email from this domain.
- Our hosting provider, which stores the data our server writes.
We will also disclose data where the law compels it. We will not hand over more than we are required to.
6How long we keep it
Order records and the emails attached to them are kept while your licence is live and afterwards for as long as tax and dispute rules require. Server logs are kept for a short period and then rotated away.
Ask us to delete your data and we will, except where we are legally required to keep a record of a sale.
7Your rights
If you are in the EU, the EEA, or the UK, the GDPR gives you the right to see the data we hold about you, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable form. Many other places give similar rights.
Write to support@bloomcheats.fun and we will act within one month. There is no charge for asking, and asking will not affect your licence.
If you think we have handled your data badly, you can complain to your national data protection authority.
8Security
Traffic to this site is encrypted. Credentials are stored hashed, access to the admin panel is limited and logged, and payment keys live on the server where the browser cannot reach them.
No system is perfect. If we ever discover a breach affecting your data, we will tell you and the relevant authority as the law requires.
9Children
This service is not for anyone under 18. We do not knowingly collect data from children, and will delete it if we find we have.
10Changes
If this policy changes, the date at the top changes with it. Material changes will also be announced on our Discord.
11Contact
Privacy questions and data requests: support@bloomcheats.fun.
This page is a plain-language summary of a legal agreement, not legal advice. If something here matters to you, take your own advice on it.