Privacy Policy

1. Who We Are

This Privacy Policy explains how Kerosene (“Kerosene”, “we”, “us”) collects, uses, discloses, and protects personal information when you visit kerosenecheats.com, create an account, purchase a license, install the Software, or interact with our support channels (collectively the “Service”).

2. Scope

This Policy applies to information we collect from or about you through the Service. It does not apply to information collected by third parties (such as Stripe, Discord, or game publishers) operating their own services, even when you reach them through links on our Service. Their handling of your information is governed by their own privacy policies.

3. Information We Collect

We collect the categories of information described below. Some information is required to provide the Service; some is collected only if you choose to provide it.

3.1 Account Information

• Username — chosen by you at signup.
• Email address — used for verification, two-factor authentication, password resets, license delivery, and important account notices.
• Password — stored only as a salted cryptographic hash; we never store, log, or transmit your plaintext password to any third party.
• Account role (User, Admin, Owner) and account state (verified, banned, etc.).

3.2 License & Purchase Information

• License keys issued to your account, the products they unlock, expiration dates, and redemption status.
• Purchase history, including product, plan, amount, currency, and transaction identifier supplied by our payment processor.
• Email receipts and download timestamps for licensed files.

3.3 Technical & Device Information

• IP address, approximate geolocation derived from the IP, and request timestamps.
• Browser user-agent, operating system, and similar headers sent by your client.
• Hardware-derived identifiers (such as a hardware ID hash) used to bind licenses to a single device and to detect abuse, where applicable.
• Service logs, error reports, request paths, and rate-limit events.

3.4 Support & Communications

• The contents of support tickets, chat messages, email replies, and any attachments (screenshots, logs, configs) you send us.
• Records of administrative actions affecting your account (e.g., bans, refunds, key revocations) for accountability and audit purposes.

3.5 Optional Integrations

• Discord account information: if you link your Discord account, we receive your Discord user ID, username, and avatar hash so we can display your profile, sync community roles, and route role-based access.

4. How We Use Your Information

We use the information we collect to:

• Create and maintain your account; authenticate you; deliver license keys; and process orders.
• Provide, operate, secure, and improve the Service, including diagnosing problems and developing new features.
• Send you transactional messages (verification codes, 2FA codes, license deliveries, ticket updates, billing notices, and important security alerts).
• Detect, prevent, and respond to fraud, account takeovers, abuse, license sharing, chargebacks, and violations of our Terms of Service.
• Comply with legal obligations, enforce our agreements, and protect our rights, property, and users.

We do not sell your personal information, and we do not use it to serve cross-context behavioral advertising.

5. Legal Bases for Processing

Where required by applicable law (e.g., GDPR), we process personal information on one or more of the following legal bases: (a) contract performance, to provide the Service you requested; (b) legitimate interests, such as keeping the Service secure and preventing abuse; (c) legal obligation, where processing is required by law; and (d) consent, where you have given it (e.g., linking your Discord account).

6. Payments & Financial Data

Payments are processed by third-party payment processors such as Stripe. We do not see, store, or have access to your full payment card number, CVV, or bank account credentials. We receive only limited information necessary to fulfill the order, including a transaction ID, the amount and currency, the last four digits or brand of the card (if applicable), payment status, and any error or risk flag returned by the processor.

7. Discord Linking

If you link your Discord account, we use Discord’s OAuth flow to receive your Discord user ID, username, and avatar hash. We use this information to display your Discord profile in the Service, grant access to gated channels or roles in our community server, and prevent duplicate or abusive accounts. You may unlink your Discord account at any time from your dashboard; doing so removes the linkage and any community roles tied to it.

8. Cookies & Local Storage

We use cookies, local storage, and session storage strictly to operate the Service. This includes:

• An authentication token kept in your browser’s local storage so you stay logged in across pages.
• A cached copy of your public profile (username, role, avatar) to render the navigation bar instantly.
• Short-lived flags used to display a notification after a successful action (such as a login welcome message).

We do not use third-party advertising cookies. You can clear this data at any time through your browser settings; doing so will log you out.

9. When We Share Information

We share personal information only as described below:

• Service providers who perform services on our behalf, such as hosting, email delivery, payment processing, and CAPTCHA / abuse detection. These providers are bound by confidentiality and may only use the information to provide the contracted service.
• Legal and safety: when required by law, subpoena, court order, or other legal process; to enforce our agreements; or to protect the rights, property, or safety of Kerosene, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to standard confidentiality and notice requirements.
• With your consent: when you direct us to share specific information (for example, linking your Discord account).

10. Service Providers & Sub-processors

We rely on a limited number of trusted vendors, including (without limitation): payment processing (Stripe), transactional email delivery, content delivery and DNS, cloud hosting, and Discord. We review these providers’ security and privacy practices and limit their access to the minimum information needed.

11. Data Retention

We retain personal information only for as long as is reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with legal, accounting, and reporting obligations, resolve disputes, and enforce our agreements. Account and purchase records are typically kept while your account is active and for a reasonable period afterward. Logs and abuse signals may be retained longer for security and fraud-prevention purposes. When information is no longer needed, we delete, anonymize, or securely archive it.

12. Security

We employ reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include TLS encryption in transit, salted password hashing, role-based access control, audit logging of administrative actions, rate limiting, and routine security review. However, no system is perfectly secure. You are responsible for keeping your account credentials confidential and for promptly notifying us of any suspected compromise.

13. International Transfers

The Service is operated from, and your information may be processed in, jurisdictions other than the one in which you reside. By using the Service you understand that your information may be transferred to, stored in, and processed in such jurisdictions. Where required by law, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

14. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information.
• Request deletion of your personal information (subject to limited exceptions such as fraud-prevention records and legal obligations).
• Object to or restrict certain processing.
• Request portability of information you have provided.
• Withdraw any consent you previously gave.
• Lodge a complaint with a supervisory authority in your jurisdiction.

To exercise any of these rights, email keroseneclient@gmail.com from the email address associated with your account. We may need to verify your identity before acting on your request and may decline requests where we are legally permitted or required to do so.

15. Children

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 18. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps to delete that information.

16. Do Not Track

Some browsers transmit “Do Not Track” signals. We do not respond to these signals because there is no industry consensus on how they should be interpreted. We do not engage in third-party advertising tracking regardless.

17. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be communicated through the Service or by other reasonable means. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Policy.

18. Contact

Privacy questions or requests? Email keroseneclient@gmail.com or open a ticket from the support page.