Your privacy is important to us. This Privacy Policy explains how ASH Cheats collects, uses, stores and protects personal information when you visit ashcheats.win, purchase a product, verify a licence key or contact our support team.
ASH Cheats determines why and how personal information is processed through our website and services and therefore acts as the data controller for that processing.
1. Information We Collect
The information we collect depends on how you use our website, products and services.
Account and contact information
- Your name or chosen account name.
- Your email address.
- Your account and customer identifiers.
- Your Discord username or identifier when provided.
- Information you submit through forms or support requests.
Order and transaction information
- Order and transaction identifiers.
- Purchased products and licence durations.
- Order status, payment status and purchase date.
- Applied discounts, refunds and payment disputes.
- Country, currency and transaction amount.
Licence and product information
- Licence-key status and verification results.
- Associated product and product-variant information.
- Activation, delivery and expiry dates.
- Licence verification and security attempts.
- Records required to prevent licence sharing or fraud.
Technical and usage information
- IP address or a protected hash derived from an IP address.
- Browser type, operating system and device category.
- Pages visited, request times and referral information.
- Security events, errors and website-performance information.
- Cookie preferences and session information.
Support communications
- Support messages and ticket history.
- Screenshots, error messages or files you choose to submit.
- Information required to identify and resolve your order.
2. How We Collect Information
Personal information may be collected directly from you, generated through your use of our services or received from service providers involved in processing your order.
- When you create an account or place an order.
- When you provide information during checkout.
- When a payment provider confirms a transaction.
- When a digital product or licence key is delivered.
- When you verify or use a licence key.
- When you submit a support request or Discord ticket.
- When you browse or interact with our website.
- Through cookies and similar technologies where permitted.
3. How We Use Your Information
We process personal information only where we have a valid reason and legal basis to do so.
To create accounts, process orders, deliver licence keys and provide access to purchased products.
To verify payments, issue receipts, manage refunds and maintain transaction records.
To answer questions, troubleshoot products and resolve order or licence problems.
To prevent fraud, chargeback abuse, attacks, licence sharing and unauthorised access.
To identify errors, understand website usage and improve our products and services.
To comply with accounting, tax, consumer-protection and other applicable legal requirements.
4. Legal Bases for Processing
Depending on the circumstances, we rely on one or more of the following legal bases.
- Performance of a contract: Processing required to complete an order, deliver a product, verify a licence or provide support.
- Legal obligation: Processing required to comply with accounting, tax, fraud, consumer-protection or other legal requirements.
- Legitimate interests: Processing required to secure our website, prevent abuse, investigate fraud and improve our services, provided those interests do not override your rights.
- Consent: Processing based on your permission, such as optional analytics, non-essential cookies or promotional communication.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
5. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to maintain essential functions, remember preferences, improve security and understand website performance.
6. Sharing Your Information
We do not sell or rent personal information. We may share limited information with trusted service providers when necessary to operate our website, process an order or comply with legal obligations.
Information may be shared with:
- Komerza: To provide storefront, account, order and digital-delivery functionality.
- Payment providers: To authorise payments, process transactions, manage refunds and investigate payment disputes.
- Cloudflare: To provide DNS, network security, website protection, hosting infrastructure and licence-verification services.
- Discord: When you use Discord for community access or customer support.
- Documentation and hosting providers: When you access product instructions, downloads or support documentation.
- Email and communication providers: To send receipts, order messages, security notices and support responses.
- Professional advisers: Such as accountants or legal advisers where reasonably necessary.
- Public authorities: Where disclosure is required by law or a valid legal request.
Service providers may only process personal information for the agreed purposes and must apply appropriate security and confidentiality measures.
7. International Data Transfers
Some service providers may process information outside Sweden or the European Economic Area.
Where required, international transfers will be protected through an applicable adequacy decision, standard contractual clauses or another lawful transfer mechanism under data-protection law.
You may contact us if you require additional information about the safeguards used for an international transfer.
8. How Long We Keep Information
We keep personal information only for as long as necessary for the purpose for which it was collected or to meet legal obligations.
Kept while the account is active and for a reasonable period afterwards when required for security or dispute handling.
Kept for the periods required by accounting, tax, consumer-protection and transaction laws.
Kept while the licence remains active and afterwards where necessary to prevent fraud, sharing or repeated abuse.
Kept for as long as reasonably required to resolve the issue, maintain support history or handle a dispute.
Kept for a limited period based on the security risk and need to investigate fraud, attacks or unauthorised access.
Kept until you withdraw consent, unsubscribe or the information is no longer required for the stated purpose.
Information may be retained for a longer period where reasonably necessary to establish, exercise or defend legal claims.
9. Data Security
We use reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, alteration, disclosure or destruction.
Security measures may include:
- Encrypted HTTPS connections.
- Access controls and account authentication.
- Restricted access to administrative systems.
- Protected or hashed licence and security information.
- Fraud detection and website-security monitoring.
- Backups, logging and incident investigation.
Although we take reasonable measures to protect information, no website, network or electronic-storage method can guarantee absolute security.
10. Your Data-Protection Rights
Depending on the circumstances and applicable law, you may have the following rights regarding your personal information.
Request confirmation and a copy of personal information we process about you.
Request correction of inaccurate or incomplete personal information.
Request deletion where information is no longer required and no legal exception applies.
Request that certain processing is temporarily or permanently restricted.
Object to processing based on legitimate interests or to processing for direct marketing.
Request eligible information in a structured and machine-readable format.
Withdraw consent for processing that relies on your consent.
Lodge a complaint with the appropriate data-protection supervisory authority.
We may request reasonable information to confirm your identity before responding to a privacy request. We will respond within the period required by applicable law.
11. Complaints to the Supervisory Authority
If you believe that your personal information has been handled incorrectly, please contact us first so that we have an opportunity to investigate.
You also have the right to submit a complaint to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, through imy.se .
12. Children’s Privacy
Our products and purchasing services are intended for people who are at least 18 years old.
We do not knowingly request personal information from children for the purpose of purchasing or using our products. If we discover that information has been supplied contrary to this requirement, we may delete or restrict it where legally permitted.
13. Automated Security Decisions
Automated systems may flag orders, login attempts, licence verifications or payments that appear suspicious.
A flagged action may be temporarily delayed or restricted while it is reviewed. Where applicable law provides such a right, you may contact us to request human review of a decision that significantly affects you.
14. Changes to This Privacy Policy
We may update this Privacy Policy when our website, products, service providers or legal obligations change.
The latest version will be published on this page with an updated effective date. Material changes will be communicated where required by applicable law.
15. Contact Us
If you have questions about this Privacy Policy or want to exercise a data-protection right, please contact our privacy support.