Privacy Policy

When you create and use an account with elusive, we collect:

• Account data: username and a securely hashed password (we never store your password in plain text).
• Device and network data: a hardware identifier (HWID) used to bind your license to a device, and IP addresses associated with logins and connections.
• Usage data: connection/session timestamps, subscription and product activity, and diagnostic logs sent by the client software (level, message, timestamp).
• Support data: the content of any support ticket or message you send us.
• Payment data: handled entirely by our payment processors (Stripe for card payments, NOWPayments for crypto), we do not receive or store your full card number or wallet keys.
• Discord data: if you choose to link or sign in with Discord, we receive your Discord user ID, username, and avatar.

• To authenticate you, enforce license/HWID binding, and deliver the Service;
• To detect and prevent abuse, including shared-account and ban-evasion patterns (e.g. accounts sharing the same HWID or IP);
• To provide customer support and respond to tickets;
• To send you service-related notices (e.g. subscription status, security alerts);
• To notify our own staff of account events (logins, kicks, registrations) via internal Discord alerts, this is for our operational monitoring, not marketing.

We use a small number of strictly functional cookies: to keep you signed in, to remember your light/dark theme preference, and to remember your chosen display language. We do not use advertising or third-party tracking cookies.

We share the minimum data necessary with the following processors, solely to operate the Service:

• Stripe / NOWPayments, to process payments;
• Discord, only if you opt in to linking or signing in with a Discord account;
• A third-party machine-translation service used to translate admin-authored FAQ and landing content into your selected display language, this only ever processes that static content, never your personal or account data.

We do not sell your personal information to anyone, ever.

We retain account and usage data for as long as your account is active, plus a reasonable period afterward for security, fraud-prevention, and legal record-keeping purposes. Diagnostic client logs are retained on a rolling basis and periodically purged. You may request deletion of your account and associated data at any time, see Section 7.

Passwords are hashed with bcrypt and never stored in plain text. Session communication between the licensing client and our servers uses forward-secret key exchange and authenticated encryption. Sensitive admin operations are protected by rate limiting and audit logging. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

You may request access to, correction of, or deletion of your personal data by contacting our support team through the Support section of your dashboard. We will respond within a reasonable timeframe and may need to verify your identity before acting on the request.

The Service is not directed at children. If you believe a child has provided us with personal data without appropriate consent, please contact support so we can remove it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy or your data can be directed to our support team through the Support section of your dashboard.