Privacy Policy

1. What we collect

What you give us: your username, email address and password (stored only as a hash), a profile picture if you upload one, and whatever you write in support tickets and reviews.

What our software collects: your public IP address, your operating system, and a hardware ID of your PC. The hardware ID ties your subscription to one computer so accounts can't be shared. We also keep a record of your downloads, loader check-ins and purchases.

We don't collect your real name, address, game accounts, chats or files, and we never see your card number.

2. How we use it

To run your account and the software you bought, to stop subscription sharing and fraud, to answer your tickets, to send account emails (email confirmation, password resets, receipts), and to keep sales records the law requires. We don't send marketing emails, and we don't sell or rent your data to anyone.

3. Who sees it

Only the people who run xhook, plus the services we need to operate:

• Stripe handles card payments. Stripe sees your card details and email; we only get a confirmation and a payment reference.
• Cloudflare sits in front of the website and routes our incoming email.
• Resend sends our account emails.
• Oracle Cloud hosts the website and database in the EU.

If a payment is charged back or disputed, we share the order and account details with the payment processor and its fraud-prevention tools. We disclose data to authorities only when the law requires it.

4. How long we keep it

Account data for as long as your account exists. Purchase records for as long as accounting law requires, even after the account is gone. Security logs and IP addresses for up to 90 days. Reviews and tickets go when the account does.

5. Your rights

You can change your email and password in your account settings. You can ask us for a copy of your data, or to delete your account, by opening a ticket or emailing [email protected]. We answer within a month. Records we must keep by law are kept, but no longer linked to you. You can also complain to the data protection authority in your country.

6. Cookies and security

The website uses one cookie, which keeps you signed in. No ads, analytics or trackers. Everything travels over HTTPS, passwords are hashed, and access to the server is limited to the people who run xhook.

7. Games and copyright

xhook doesn't distribute any game files. Game names, logos and artwork shown on this site belong to their owners and are used to identify the games. xhook is not affiliated with or endorsed by any game developer or platform.

8. Who we are

xhook is run by xhook, Lithuania. Questions about this policy: [email protected]. You must be 18 or older to use xhook. We may update this policy; the date at the top shows the current version.