Privacy & Data Protection Policy
In Effect: October 2026 • Compliant with Modern Cryptographic Privacy Standards
1. Information We Collect
To provision licenses and provide secure software downloads, Vortex Store collects minimal essential telemetry:
- Account Credentials: Email address, username, and bcrypt-hashed passwords (cost factor 12+). We never store plaintext passwords.
- Hardware Fingerprints (HWID): An irreversible cryptographic SHA-256 hash derived from machine specifications to bind single-PC licenses.
- Order Records: Payment slips uploaded for manual verification, WhatsApp/email contact handles for key delivery, and transaction timestamps.
- Security Telemetry: Anonymized IP addresses and failed attempt counters used exclusively by our progressive rate-limiting engine to thwart brute-force attacks.
2. Session Management & HttpOnly Cookie Architecture
We protect all customer sessions using hardened JSON Web Tokens (JWT) stored strictly in HttpOnly; Secure; SameSite=Strict cookies.
This architectural standard ensures your session keys are inaccessible to client-side JavaScript, rendering your authentication tokens completely immune to Cross-Site Scripting (XSS) extraction.
3. Zero Commercial Data Sharing Guarantee
Vortex Store maintains a strict zero-sharing policy. We never sell, rent, monetize, or trade your personal data to advertisers, brokers, or third-party marketing networks. Telemetry is utilized solely for license enforcement and customer support fulfillment.