Privacy Policy
Last updated: April 2026
Data We Collect
When you create an account or use our services, we may collect the following information:
- Account Information: Your username, email address, and hashed password.
- Device Information: A hardware identifier (HWID) used to lock your license to a single device for security purposes.
- Payment Information: Transaction reference IDs from PayPal. We do not store your credit card or PayPal credentials.
- Usage Data: Client version, login timestamps, and IP addresses (for security and abuse prevention).
- Macro Configurations: Custom macro settings stored in your cloud account for syncing across sessions.
How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your account.
- To verify and enforce device-based licensing (HWID lock).
- To process payments and activate subscriptions.
- To send transactional emails (password resets, username reminders).
- To provide customer support through Discord and email.
- To detect and prevent fraudulent use or abuse of our services.
Data Storage & Security
Your data is stored on secure servers hosted by Render with TLS encryption in transit and at rest. Passwords are stored using strong one-way hashing (bcrypt). API keys are generated securely and transmitted over HTTPS.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will delete your data within 30 days, except where retention is required by law.
Server logs containing IP addresses and usage data are automatically purged after 90 days.
Third-Party Services
We use the following third-party services to operate our platform:
- PayPal: Payment processing. Your payment is subject to PayPal's Privacy Policy.
- Render: Web hosting and infrastructure.
- Google Fonts: Font delivery for the website interface.
We do not sell, trade, or share your personal data with third parties for marketing purposes.
Cookies
We use essential cookies to maintain your login session and protect against cross-site request forgery (CSRF). We do not use tracking cookies, analytics cookies, or any advertising cookies.
- Session Cookie: Maintains your authenticated session. Expires when you close your browser or log out.
- Remember Me Cookie: If you choose "Remember Me" at login, a persistent cookie is set for 30 days.
Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Export your macro configurations.
To exercise any of these rights, please contact us using the information below.
Contact Us
If you have questions about this Privacy Policy or your personal data, you can reach us through:
- Discord: Join our community
- Email: support@gma-macro.com