This policy explains what data Acuity collects, why, and how it is
handled. We collect the minimum needed to run the service.
Data we collect
- Account: your email address and a password stored
only as a salted hash (bcrypt over a client-side SHA-256 of your
password) — we never store your plaintext password.
- License + device: a hardware identifier (HWID),
stored as a hash, used to bind a license to your machine and enforce
license terms.
- Payments: processed by Stripe. We receive
transaction and subscription status from Stripe; we do not receive or
store your full card number.
- Discord (optional): if you link Discord, we store
your Discord user ID to grant the customer role. You can unlink at any
time from account settings.
- Operational: session cookies for login, a CSRF
token, and standard server logs (e.g. IP address, timestamp) for
security and abuse prevention.
How we use it
- To authenticate you and provide the loader and licensed software.
- To process payments and manage subscriptions (via Stripe).
- To enforce license terms and prevent fraud and abuse.
- To provide support and send service-related notices.
Cookies
We use first-party cookies only: a session cookie (HttpOnly, and
Secure over HTTPS) and a CSRF-protection cookie. We do not use
third-party advertising or tracking cookies.
Sharing
We share data only with processors needed to run the service
(Stripe for payments, Discord for the optional role link) and where
required by law. We do not sell your data.
Retention
We keep account and license data while your account is active. When
you delete your account, associated personal data is removed except
records we must retain for legal, tax, or fraud-prevention purposes.
Your choices
You can update your email, change your password, unlink Discord, or
delete your account from your account settings.
Contact
Privacy questions or data requests: reach us in our
Discord.