Who we are
This policy is issued by CHEATS.IM Ltd, registered in Cyprus. We are the «controller» of personal data described below. Our data-protection officer can be reached at [email protected].
This policy explains what data we collect about you, why, who we share it with and how long we keep it. It applies to cheats.im, market.cheats.im and any product we own.
Data we collect
Why we use it
- To deliver the product — activate keys, run anti-fraud, prevent shared keys.
- To take payments and prevent chargeback fraud (legitimate interest).
- To support you when you raise a ticket (contract performance).
- To improve evasion — we analyse detection events at aggregate level; we never sell user data.
- To comply with law — respond to lawful requests from courts and regulators.
Sharing
We share only the minimum necessary, with:
- Payment service providers (Stripe, Coinflow, Tron node operators) — to process your payment.
- Cloud hosting (Hetzner, OVH, Cloudflare) — to run our services.
- KYC provider (Sumsub) — only for seller verification.
- Authorities — only when legally compelled, and only the data they specifically request.
Retention
Your rights
Wherever you are based, you can:
- Request a copy of the personal data we hold about you.
- Ask us to correct anything that is wrong.
- Ask us to delete your account — we will, except where law requires us to retain certain records (payments, KYC).
- Object to processing based on legitimate interest.
- Withdraw consent where consent is the legal basis.
- Lodge a complaint with your supervisory authority. In the EU/EEA that is your local DPA; in Cyprus, the Commissioner for the Protection of Personal Data.
To exercise these rights, write to [email protected]. We reply within 30 days.
Cookies and tracking
We use only first-party, strictly necessary cookies for session, CSRF and theme. We do not use marketing trackers, ad pixels or third-party analytics. A single self-hosted Plausible instance counts page views without IP storage.
Children
Our service is not for under-18s and we do not knowingly collect their data. If you believe a minor has registered, write to [email protected] and we will close the account.
Changes
We may update this policy. Material changes are emailed to active users 30 days in advance. The version and effective date at the top of this page is the canonical reference.