1. Controller and scope
When commercial operation begins, the data controller will be the actual seller clearly identified at checkout. Because its legal identity and contact details are not complete, this site must not currently collect live order or payment data. This notice does not govern data that Steam, the game operator, or a payment provider collects independently on its own pages.
2. Purposes of collection
Data is used only to create and manage orders; verify payment outcomes; prevent duplicate issuance and fraud; provide downloads and activation codes; bind one Windows installation; validate a license; send transaction and delivery notices; process a reset after reinstallation or a computer change; provide support and resolve consumer disputes; and comply with accounting, tax, security, and other legal duties.
Order data is not automatically added to an advertising or general-marketing list, and it is not sold, rented, or exchanged. Any future marketing use requires separate, clear notice and appropriate consent.
3. Categories of data
- Contact and preference: order email, language preference, and necessary information voluntarily included in a support exchange.
- Order and payment outcome: order number, product, amount, currency, status, timestamps, payment-provider transaction reference, payment type, and verification outcome.
- License and device: an irreversible digest of the activation code, encrypted delivery backup, license identifier and state, reset revision, an irreversible digest of the Windows installation identifier, and necessary data for short-lived activation, session, receipt, and download credentials.
- Security records: system audit events and a short-lived rate-limit value derived with a secret key from connection-address information, from which the original address is not directly recoverable.
Card details are handled directly on the payment provider's page. This site does not request, receive, or store a full card number or card security code. Never send those details by email or support message.
4. Retention, locations, recipients, and methods
Retention: Order and license data is retained while the perpetual license remains active and afterwards only as needed for accounting, tax, consumer disputes, security, or another legal retention duty. It is deleted or de-identified when no longer needed. Short-lived credentials expire under their security windows, and rate-limit values are removed after approximately ten minutes.
Locations and recipients: Data may be processed in Taiwan and locations where contracted infrastructure providers operate, by the actual seller and providers needed for payment, hosting, databases, object storage, and email delivery. The planned technical stack currently includes NewebPay, Cloudflare, and Resend. The seller must reconfirm the providers and cross-border arrangements before launch.
Methods: Processing takes place over encrypted connections, in automated order and license systems, and through human support only where needed. Access is limited to people and contracted providers who need the corresponding data for performance, security, legal compliance, or dispute handling.
5. Required and optional data
The order email, verified payment outcome, and required consent records are necessary for purchase and delivery. The device-identifier digest is needed only for activation and license validation, and the order email is also used for a later verified reset. Without the relevant data, the corresponding service cannot be provided. Language preference is optional and does not determine purchase eligibility. Support should not request unrelated identity documents, a Steam password, full card number, or card security code.
6. Your data rights
Through the privacy contact shown at live checkout or on the receipt, you may request access or inspection, a copy, correction or supplementation, cessation of collection, processing, or use, and deletion, as provided by law. Some order, payment, audit, or licensing records cannot be deleted immediately where they remain necessary to perform the contract, protect another person's rights, or comply with a legal retention duty. The response will explain the result and reason.
Nothing in this notice asks you to waive or restrict rights under Taiwan's Personal Data Protection Act. The official Chinese text is available from the Ministry of Justice Laws & Regulations Database.
7. Payment provider and third parties
Checkout opens the payment provider's official page as a top-level page. The provider independently handles card, authentication, and risk data in its own capacity, then returns the payment outcome to this system. Buyers should also read the provider's privacy and transaction information shown on its payment page.
Order and licensing data is not disclosed to other third parties except as needed for contract performance, contracted processing, lawful requests from competent authorities or courts, protecting legal rights, or handling a dispute.
8. Security, credentials, and data incidents
The system keeps activation-code and device-identifier digests, encrypts the necessary delivery backup, and uses short-lived, revocable receipt, download, and session credentials. A license reset invalidates the previous activation code, device binding, old sessions, and old download link.
No internet system can promise absolute security. If personal data is stolen, altered, damaged, lost, or disclosed, the controller will take response measures and notify affected people as required by law.
9. Browser storage and notice versions
The site uses browser local storage to remember a Traditional Chinese or English preference. It does not keep the activation code in browser storage. This version uses no advertising tracker. Before any non-essential analytics or marketing technology is added, the notice will be updated and a legally required choice will be provided.
Updates show a new version and date. A material change to purposes, categories, use, or data rights will be clearly communicated before it applies. A privacy notice will not be used to unilaterally expand the purposes for which existing data is used.