Controller and contact
67Client
France
VAT: not supplied / not applicable
Email: [email protected]
Data and purposes
We process your verified Google subject, email, name and avatar for sign-in; optional Discord identity for account linking and customer roles; licence key, plan, expiry and a pseudonymous machine fingerprint for access control; personalised download watermarks; orders, payment references, accepted policy versions, timestamps and withdrawal requests; reviews and support messages you submit. Technical logs include IP addresses and request metadata for security. A hardware fingerprint is personal data when linkable to an account and is not treated as anonymous.
Legal bases
Account, payment and delivery processing are necessary to perform the purchase contract. Accounting records are retained for legal obligations. Limited security logging, anti-fraud controls and licence enforcement rely on legitimate interests, balanced against your rights. Optional public reviews and Discord linking are actions you choose; you can remove your review or disconnect Discord. We do not receive or store full card numbers, card security codes or Google/Discord passwords.
Recipients and transfers
Stripe, SellAuth or Whop and their connected payment processors handle your selected payment. SellAuth receives your order reference, account identifier, account email, chosen plan, price, policy version and browser/IP details to create and verify the checkout. Whop receives your order reference, account identifier, chosen plan, price, payment method and policy version to create and verify the checkout, and collects the payment and contact details you enter on its checkout page. Resend sends confirmations, Google supplies sign-in, Discord supplies optional community linking, and Cloudflare plus our server host provide infrastructure and protection. Authorised staff can access data needed for support. Providers may process data outside the European Economic Area under their applicable transfer arrangements. We do not sell data to advertisers. Profile images can load from Google or Discord servers. A review publishes the name, avatar, rating and text displayed in the review form.
Retention
Operational events and support data are limited and periodically pruned: closed tickets after 30 days and activity/rate records according to the server retention policy. Order confirmations and payment/withdrawal evidence are kept for the accounting, tax and legal claim periods that apply to the seller. Account and licence data remain while access is active and then only as needed for legal obligations or proportionate dispute and fraud handling. Backups follow the operator's documented rotation. Ask support for deletion or a retention explanation; legally required records cannot always be erased immediately.
Your rights
You can request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. Contact the seller using the email above. We may need proportionate identity verification. You may complain to France's Commission nationale de l'informatique et des libertés (CNIL) at https://www.cnil.fr/fr/adresser-une-plainte or your local data protection authority. Removing data necessary to provide a licence may prevent continued access; this does not automatically remove your contractual remedies.
Cookies and security
See /cookies for session, language and OAuth cookies and provider security cookies. HTTPS, restricted staff access and private server storage protect account data. No system can guarantee absolute security. Do not submit passwords, licence keys, card details or unnecessary personal data in support logs.