Privacy Policy.

1Who we are

ZYON CHEATS (“ZYON”, “we”, “us”) is the controller of the personal data described in this policy. You can contact us about privacy at the ZYON support page.

This policy covers the ZYON CHEATS website, checkout, customer accounts, order lookup and support. It does not cover the games our cheats are designed for, or other websites we link to; they have their own privacy policies.

2Information we collect

Information you give us

• Email address, when you check out, sign in or contact support.
• Anything you include when you contact support, such as your order reference, the cheat, and screenshots or system details you choose to share.

Order records

For every order we store your email address, the cheats and key length bought, price, currency, payment method type, payment status, order reference and the licence key delivered, together with:

• the IP address the order was placed from, and the country derived from request headers supplied by our hosting network;
• your user agent (browser and device information);
• for card payments, a card fingerprint provided by Stripe, an identifier that lets us recognise the same card across orders for fraud checks without ever seeing the card number;
• any referral code or affiliate identifier and discount code used for the order;
• for crypto payments, the NOWPayments payment reference, coin, amount and status. Blockchain transactions themselves are public.

Sign-in and sessions

• One-time sign-in codes are emailed to you and stored only in hashed form until they are used or expire.
• Session records hold the IP address, user agent and times a session was created and used, so you can see and end your active sessions.
• For staff accounts we also keep admin login logs (IP address, user agent, time and outcome of each sign-in attempt).

Fraud prevention

• Blacklists of IP addresses and email addresses linked to fraud, chargeback abuse or breaches of our terms.
• VPN and proxy checks: when you start a card checkout, your IP address is sent to vpnapi.io to check whether it belongs to a VPN, proxy, Tor exit or hosting network.
• Payment-risk signals that Stripe returns for card payments.

Analytics and behaviour (only with your consent)

If you choose Allow analytics, we create a random analytics session id in your browser’s session storage and record the pages you view and store events such as cheat page views, basket changes, checkout starts and purchases, together with a coarse device type, browser family, the referring website’s domain and campaign source or medium. If you place an order during that session, the session may be linked to the order so we can see which pages lead to purchases. None of this is collected if you choose Necessary only.

Referrals, affiliates and ad attribution

• If you arrive through a referral or affiliate link, we record the referral code so the order can be credited to the referrer, any linked discount applied and any commission calculated.
• If you arrive from a Google ad and have allowed analytics, we may store the ad click identifier and campaign parameters to attribute your order to that campaign.

Stored only in your browser

Your basket is kept in your browser’s local storage and is not sent to us until you check out. See the Cookie Policy for every cookie and storage item we use.

3How we use it and our lawful bases

We do not sell your personal data and we do not use it for automated decisions that have legal effects on you, other than the fraud checks described below.

4Automated fraud checks

Checkout runs automated checks against our blacklists, the VPN and proxy lookup and payment-risk signals. A check can hold or block an order automatically. If you believe an order was blocked in error, contact the ZYON support page and a person will review it.

5Who we share it with

We share personal data only with service providers that process it for us, and only as needed for the purposes above:

We may also disclose data to professional advisers, to a payment provider investigating a dispute, to authorities where the law requires it, or to a successor if the store is sold or reorganised.

6How long we keep it

• Orders and payment records: for as long as needed to provide the service and to meet accounting, tax, fraud-prevention and dispute requirements, then deleted or anonymised.
• Sign-in codes: short-lived; they expire shortly after they are sent and cannot be reused.
• Customer sessions: up to 7 days, or until you sign out or end the session.
• Analytics and behaviour events: automatically deleted after 400 days.
• Google Ads attribution: up to 90 days in your browser; attribution linked to an order is kept with that order record.
• Blacklist entries and admin login logs: for as long as they are needed to protect the store.
• Support messages: for as long as needed to resolve your request and any follow-up.

7How we protect it

• All traffic is encrypted with HTTPS. Session cookies are HttpOnly, Secure and SameSite.
• Sign-in codes are hashed; staff accounts use two-step sign-in and every admin sign-in is logged.
• Requests pass through rate limiting and a request shield, and pages use a strict Content Security Policy.
• Payments are handled by PCI DSS compliant providers, so card numbers never touch our servers.
• Access to customer data is limited to staff who need it.

No system is perfectly secure. If a breach affects your data we will notify you and the relevant authority where the law requires it.

8International transfers

Our providers may process data in countries other than yours, including the United States. Where the law requires it, transfers rely on appropriate safeguards such as adequacy decisions or standard contractual clauses offered by those providers.

9Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data;
• delete your data, subject to records we must keep for legal, tax or fraud-prevention reasons;
• restrict or object to processing based on our legitimate interests;
• portability: receive data you gave us in a machine-readable format;
• withdraw consent for analytics at any time, without affecting processing before you withdrew;
• complain to a data protection supervisory authority, for example in the country where you live or work.

To use these rights, contact the ZYON support page from the email address linked to your orders. We may ask you to confirm your identity and will normally reply within one month.

10Children

We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

11Cookies

We use necessary cookies to run the store and, only if you allow it, analytics and attribution. The Cookie Policy lists each one. You can change your choice at any time.

12Changes to this policy

We will update this policy when our services or providers change. The “Last updated” date shows the latest version. Significant changes will be highlighted on the site.

13Contact

Privacy questions and requests: the ZYON support page.