PRIVACY
POLICY.

01. ABOUT THIS POLICY

Undutu is a UK-based software store operating at undutu.com. We supply software under permission from its developer.

This policy covers information handled in connection with our store, licensed software access and support. Where another organisation uses information for its own purposes, its privacy information also applies to that processing.

For a privacy enquiry or a request concerning your information, visit our Discord page and open a ticket in the #ticket channel.

02. INFORMATION WE PROCESS

Accounts & purchases.

We process the information you provide when creating an account, placing an order or contacting us. This includes your name, email address, account information and purchase history.

Order records include the product and licence purchased, order reference, payment amount, payment status and information needed to provide access to your download.

Cryptocurrency payments.

For cryptocurrency checkout, we ask for your name and email address. We use MyCryptoCheckout to support cryptocurrency payments and payment verification.

We also process the transaction information needed to match a payment to your order, such as its currency, amount, transaction reference and confirmation status. If you request a cryptocurrency refund, we may need a refund wallet address and network details.

Transactions recorded on a public blockchain may remain publicly accessible. Deleting an Undutu account does not remove transactions from the blockchain.

Card payments, where available.

If you use a card checkout offered through Shopify or a payment integration connected to our store, the payment provider requests the billing and payment information needed to process that transaction.

The information required depends on the payment method and provider. The provider’s privacy information applies to its processing, alongside this policy for the customer and order information handled by Undutu.

Launcher & licensing information.

The launcher processes your registered email address and licence information, together with:

• Your hardware identifier, used to recognise the PC linked to your licence.
• Your IP address.
• Launcher usage logs.

This information supports licence validation, the one-PC restriction, troubleshooting and protection against misuse.

The launcher does not capture screenshots. Screenshots you choose to send in a support ticket are handled as part of that support request.

Discord support.

We provide support through the Undetek Discord server using Ticket Tool. A ticket may contain your Discord username or identifier, messages, order details and any files or screenshots you choose to provide.

Only include information relevant to your request. Do not send account passwords, wallet recovery phrases or unrelated personal information.

Reviews & comments.

If you submit a product review or comment, we process the information entered in the form. Your published name, rating and review or comment may be visible to other visitors. IP address and browser information may also be processed to help identify spam or misuse.

Where Gravatar is enabled, an identifier derived from your email address may be sent to that service to check for an associated profile image. See the Automattic Privacy Policy.

03. HOW WE USE INFORMATION

We use personal information for the following purposes and lawful bases:

• Providing your purchase — contract: creating and managing your account, confirming payment, providing downloads and licensed access, and supplying support needed to fulfil your purchase.
• Responding before a purchase — contract: taking steps you request when asking about a product or placing an order.
• Security and administration — legitimate interests: protecting the store and licensing system, investigating misuse, diagnosing technical problems and managing enquiries, where those interests are not overridden by your rights.
• Meeting legal requirements — legal obligation: keeping records required by applicable law and responding to legally binding requests.

Information needed to create an account, verify payment or validate a licence is necessary to provide the relevant service. Without it, we may be unable to complete your order or provide software access.

Payment and licence checks may operate automatically. If you believe a check has incorrectly prevented access, contact support so the issue can be reviewed.

04. COOKIES & ANALYTICS

Website functionality.

Our website uses cookies and similar technologies for functions such as account sessions, login preferences, shopping-cart information and website security.

You can manage or delete cookies through your browser settings. Blocking some cookies may prevent account, cart or checkout features from working correctly.

Google Analytics.

We use Google Analytics to understand how visitors use the website and identify areas for improvement. Depending on the configuration, this can involve information about pages viewed, interactions, referral sources, device and browser details, and cookie or similar identifiers.

Google processes information associated with the analytics service. Read Google’s Analytics privacy information for further details.

05. EMAILS

We use MailPoet for emails connected with our service. This involves processing recipient information, email content and relevant delivery information.

We do not currently send promotional emails. Account and order communications are separate from promotional mailing lists.

Read the MailPoet privacy information for details about the provider’s processing.

06. ACCESS & SERVICE PROVIDERS

Launcher information.

Direct access to stored launcher hardware identifiers, IP addresses and usage logs is restricted to the software developer and head administrator. General support staff do not have direct access to those records.

Support staff handling a ticket can see the information you choose to provide in that ticket. This does not give them general access to the launcher records.

Services used by Undutu.

We use the following services in connection with the website, purchases and support:

• Cloudflare: website delivery and protection services, which may process IP addresses and technical information about website requests. See the Cloudflare Privacy Policy.
• MyCryptoCheckout: cryptocurrency payment integration and verification. See the MyCryptoCheckout Privacy Policy.
• Google Analytics: website usage measurement, as explained above.
• MailPoet: service-related email processing and delivery.
• Discord and Ticket Tool: support conversations and ticket management. See the Discord Privacy Policy.
• The software developer: access to the licensing and technical information described in this policy to support the software and licensed access.
• Card-payment services, where used: the provider involved in the selected checkout. Where Shopify is involved, see the Shopify Privacy Policy.

Providers may process information on our behalf or for their own purposes, depending on the service and their role. Their privacy information explains their own processing; it does not replace our responsibilities for information handled by Undutu.

We may also disclose relevant information where required by law or where necessary and lawful to establish, exercise or defend legal claims.

07. DATA RETENTION

Our current deletion arrangements are:

• Customer accounts and order records: these do not currently have an automatic deletion date. You may request account closure or deletion of personal information through a Discord ticket.
• Launcher logs for fixed-term licences: logs are cleared when the subscription expires.
• Launcher logs for Lifetime licences: these have no automatic subscription-expiry date and are removed on request, subject to any applicable legal grounds for retaining particular information.
• Discord tickets: ticket contents are cleared when the ticket closes.
• Ticket transcripts: we do not normally retain transcripts. A transcript is created only when requested.

These arrangements concern information under our control. Closing a support ticket does not delete your Discord account or information Discord retains for its own purposes. Transactions recorded on a public blockchain are also separate from our account records.

Account deletion does not necessarily require deletion of every record. Certain information may need to be retained to meet legal obligations or deal with an existing dispute. Any continued retention must have a valid purpose and be limited to what is necessary.

08. PROCESSING LOCATIONS

We use services supplied by organisations operating internationally. Personal information may therefore be processed outside the UK, depending on the service and its configuration.

Using Cloudflare does not, by itself, identify the location of the underlying store database or the developer’s licensing system.

09. YOUR RIGHTS & REQUESTS

Depending on the circumstances and applicable law, you may have the right to:

• Ask for access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of personal information.
• Request restrictions on how information is used.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent, without affecting the lawfulness of processing before withdrawal.

Your right to object.

You can object to processing based on legitimate interests for reasons relating to your circumstances. We will consider the objection and stop that processing unless applicable law allows us to continue.

Requesting access or deletion.

Visit our Discord page and open a ticket in the #ticket channel. Explain whether you want to access, correct or delete information, or close your account.

We may ask for information reasonably needed to verify that the account or records belong to you. Do not send your password or wallet recovery phrase.

Requests are normally free, and we respond within the applicable legal time limit, usually one calendar month. If an extension or restriction is permitted by law, we will explain the reason.

Some rights depend on the reason information is being processed. If we cannot fulfil all or part of a request, we will explain why. Our preferred Discord process does not limit any other legally valid way of exercising your rights.

Privacy complaints.

If you are concerned about how we have handled your information, raise a privacy complaint through the same support route so it can be investigated.

10. POLICY UPDATES

We may update this policy when our services, providers or data-handling practices change. The date at the top shows when the policy was last updated.

Where a change requires additional notice or consent under applicable law, updating this page alone does not replace that requirement.