Privacy Policy

Sanrio~ decides how and why your personal data is used on this site, so we are its controller. You can reach us about anything in this policy through a ticket in our Discord.

When you activate a key, the product's loader may lock it to a hardware ID (HWID): a fingerprint of your PC used only to enforce the one-device license and to process HWID resets.

• Card numbers or bank logins. Payments are handled by the payment provider you choose; we only see whether a payment arrived and the reference you give.
• Your game account passwords. We never ask for them.
• Advertising profiles. We don't use ad networks, analytics trackers or sell data.

• To provide the store (contract): accounts, wallet, delivering keys, warranty and support.
• To keep the store safe (legitimate interest): stopping fraud, chargeback abuse, key sharing and attacks.
• To meet legal duties (legal obligation): keeping accounting records of payments and orders.
• To remember your settings (legitimate interest): language, theme and currency.

We don't make decisions about you based only on automated processing that have legal or similarly significant effects.

We share data only with services that help us run the store, and only what each one needs:

We may also disclose data if the law requires it, or to protect our customers, our staff or the store from fraud or harm. We never sell personal data.

Our main database is hosted in the European Union (Paris). Some providers above process data outside the EU, including in the USA. When they do, we rely on safeguards the law recognises, such as the European Commission's Standard Contractual Clauses.

We use only what the site needs to work, so there's no consent banner. Nothing here is used for advertising or analytics.

Depending on where you live (for example under the EU or UK GDPR or California law), you can ask to:

• see the personal data we hold about you and get a copy of it;
• correct data that is wrong;
• delete your account and data, except records the law makes us keep;
• object to or limit some uses of your data;
• complain to your local data protection authority.

To use these rights, open a ticket from the Discord account or email linked to your Sanrio~ account. We answer within 30 days, and may ask you to confirm your identity first.

Connections to the site are encrypted (HTTPS). Database access is restricted by row-level security, so customers can only read their own data, and only a few staff accounts can reach the admin tools. No system is perfectly secure: use a strong, unique password or sign in with Discord, and tell us right away if you think your account was accessed by someone else.

Sanrio~ is for adults only. We don't knowingly collect data from anyone under 18, and we delete accounts we find belong to minors.

When we change how we handle data, we update this page and the date at the top. If a change is important, we will also announce it in our Discord.