Privacy Policy
How ExeEdge handles account, order, support, referral, and Discord information, and how to contact us about your data.
Last updated
This policy explains what information we handle, why we need it, and the choices available to you when using ExeEdge.
Who we are and what this covers
ExeEdge operates the website at exeedge.cx, its customer services, and its referral and media programs. In this policy, “ExeEdge”, “we”, and “us” refer to the operator of those services. ExeEdge operates outside the European Union and North America. Privacy questions and requests can be sent to support@exeedge.cx.
This policy covers the website, account services, purchases, support, and optional Discord connection. If separately supplied software collects additional information, that collection must be explained with the relevant software. Third-party platforms have their own privacy notices.
Information used by the service
Some information comes directly from you. We also receive payment confirmations from payment providers, profile and connection information from Discord when you authorize it, and technical information from service providers. Do not send passwords, authenticator codes, full card details, or wallet recovery phrases in support messages.
- Account information: your email address, display name, account identifier, and profile settings. Our authentication provider processes your sign-in credentials, sessions, email verification, recovery events, and authenticator enrollment information where applicable.
- Purchase and access records: products and plans selected, prices, payment-provider references, order status and payment records, license entitlement records, activation and expiry dates, and refund or dispute history.
- Support information: the subject and contents of your requests, replies, and information you choose to provide to help us investigate an issue.
- Current website activity: authorized administrators can see a temporary online visitor list, with your display name and account category when signed in, a broad page category such as products or checkout, and the last activity time. Guests appear without a name. This presence record does not contain form contents, full URLs, payment details, IP addresses, or device fingerprints. It replaces the previous presence state instead of keeping a browsing history; inactive entries become eligible for automatic deletion after one hour.
- Discord information, if you connect: Discord user ID, username, display information, avatar, connection status, permissions granted, and the membership or role information needed to manage your ExeEdge access.
- Program information, if you participate: referral attribution, eligible purchase and commission records, channel and video links, application or submission details, review decisions, reward balances, and payout instructions you provide.
- Technical and security information: we keep a security activity log of requests to our services and authentication events such as sign-in, registration, sign-out, and password reset. Each record can include your account identifier when signed in, IP address, approximate country, browser and device information from your user agent, the time and result of the request, and a device fingerprint — a hash of stable browser properties such as screen size, time zone, and language, used to recognize returning devices. Failed sign-in attempts record a scrambled (hashed) form of the email address, never your password. Our hosting, authentication, and security providers may additionally process request data such as IP addresses, request times, and errors to deliver and protect the service.
Why we process information
Where data-protection law requires a legal basis, we rely on performing our agreement with you for account, purchase, and requested support services; legitimate interests for proportionate security, fraud prevention, and service administration; legal obligations for required records; and consent where required for optional processing. If we rely on consent, you may withdraw it for future processing. Providing account or transaction information may be necessary to use the corresponding service.
- To register and authenticate accounts, secure account recovery, deliver purchased access, maintain order records, and respond to support requests.
- To confirm transactions, reconcile refunds and disputes, calculate eligible program rewards, and process requested payouts.
- To provide Discord features you choose to connect, including membership and subscription-role management.
- To diagnose faults, prevent account abuse and fraudulent transactions, maintain service security, enforce service rules, and meet applicable legal or recordkeeping obligations.
Service providers and other disclosures
Access to customer records is limited to authorized staff and providers that help deliver the service. Providers may process information in their own locations under their terms and privacy notices. The services used include:
- Cloudflare for website delivery, network security, website API requests, and Turnstile security checks during sign-in, registration, and account recovery. These checks use browser, device, and network signals to help distinguish people from automated traffic.
- Supabase for account authentication and storage of customer and service records; Resend for authentication and security emails sent through that service, and for service emails sent to your account email address: payment confirmations, notices that a license key is ready or that access is ending or has ended, and notices of a staff reply to your support ticket. These emails name the product and plan or the ticket subject; license keys and support messages stay in your account.
- Railway for hosting the service that manages the optional Discord connection, license delivery, and the license-ready, access-ending and support-reply emails; Discord for the profile, membership, and role features you authorize.
- Payment providers, when the respective method is available and selected: OxaPay for cryptocurrency checkout, and OVGC, SellAuth or GameBoostPlay for hosted checkout. GameBoostPlay processes card payments through Stripe on its own infrastructure; ExeEdge holds no Stripe credentials and sends Stripe nothing directly. Payment providers process the payment details entered on their own pages, and receive the email address of the account making the purchase. ExeEdge’s checkout does not collect your full card number or security code.
- A payment method may be configured to collect a different currency, or an amount above the listed price, which is shown on that provider’s own payment page before you pay. Your ExeEdge order records the listed price.
- Payment or payout services needed to carry out a transaction you request, including information needed to investigate a payment dispute.
Other circumstances where information is shared
We may disclose relevant information when a valid legal obligation requires it, to investigate fraud or misuse, or to establish, exercise, or defend legal claims. A change in ownership of the service may involve transferring relevant records, subject to applicable privacy requirements and notice where required.
Information you post on a community platform or publish through your own media channels can be visible to others under that platform’s settings. A referral participant may see limited attribution and reward information about qualifying activity; this does not grant access to another customer’s account, messages, credentials, or license keys.
Our providers may handle information outside your country. Where applicable law requires safeguards for an international transfer, those requirements continue to apply. You can contact us for information about the arrangements relevant to your data.
Cookies and browser storage
We use cookies and similar browser storage to keep account sessions working, secure Discord linking and authenticator recovery, and maintain a checkout attempt while its result is being confirmed. Authentication session information can remain in local browser storage until you sign out or it is cleared; security and checkout information may use short-lived cookies or storage for the current browser session.
When you follow a referral link, its code is stored locally with a 30-day validity period. The site removes it after it is claimed or when it next checks an expired or invalid code. Once a referral is linked to an account, the server keeps the attribution and resulting reward records separately.
A random first-party presence cookie, valid for one day, groups visits from the same browser in the private online visitor list. Visible pages update their presence about once a minute; background tabs stop sending updates. Signed-in visits are grouped by account.
You can clear or block cookies and site storage in your browser. Doing so may sign you out, interrupt recovery or checkout, or prevent a referral from being recorded. Clearing browser storage does not delete records already held in your account. A payment or community platform may use additional storage when you visit it; its own notice explains that use.
Your optional Discord connection
Connecting Discord is separate from creating an ExeEdge account. The approval screen describes the permissions requested. The connection can identify your Discord account, add it to the configured ExeEdge server when authorized, and manage roles linked to eligible product access. Server-join permission can also support migration to a replacement community server.
If Discord sign-in is separately offered and you choose it, our authentication provider may receive your Discord profile and email address to sign you in. Signing in with Discord and connecting it for community membership are separate permissions.
The connection service stores protected authorization credentials so it can maintain the connection and complete authorized membership actions. You can request disconnection from account settings or revoke authorization in Discord. Limited connection and cleanup records may remain while pending role removal or token revocation is completed. Disconnecting Discord does not by itself close your ExeEdge account or remove purchase records.
Retention and account closure
The period for which a record is needed depends on its purpose: maintaining an active account or entitlement, resolving a support request, reconciling a transaction or program reward, preventing repeat abuse, or satisfying an applicable recordkeeping or legal requirement. There is no single retention period that applies to every record.
Frontend activity, administrative audit, download, presence, and delivery history is retained indefinitely, without automatic expiry or routine deletion, including after account closure. These records can include IP addresses and device fingerprints.
Account closure and data requests are handled through support. Some information may need to remain after closure, including outstanding transaction records, disputed payments, unpaid rewards, and records required for legal claims or accounting. Where retention is required, a closure request does not automatically erase those records. We assess deletion requests against these needs and the law that applies; we do not promise instant deletion of all records or provider backups.
Your privacy choices and rights
You can update available profile details in your account and contact support about access to your information, corrections, account closure, or deletion. Depending on the law that applies to you, you may also have rights to restrict processing, object to certain uses, receive a portable copy of your information, or complain to a data-protection authority.
We may ask for proportionate proof that a request concerns your account before disclosing or changing personal information. Send requests from your registered email address where possible. We will explain any information needed to process the request and any lawful reason a request cannot be fulfilled in full.
If an automated account, reward, or security check appears incorrect, contact support so the relevant record or decision can be reviewed.
Security and younger users
We use access controls, protected connections, and account-security measures to reduce unauthorized access. No online service can eliminate every security risk. Keep your credentials private and follow account verification and authenticator requirements.
Our paid services are intended for people who can legally enter the relevant agreement. If you are below the legal age to do so, a parent or legal guardian must authorize and take responsibility for your use where that is lawful. Do not use the service if local age restrictions or a connected platform’s age requirements prohibit it. If you believe a child has supplied information without required authorization, contact us so we can review and take appropriate action.
Changes and contact
We update this page when the described practices change and revise the date above. Material changes will be brought to your attention where required. A policy update does not replace consent where consent is required for a new use of information.
Contact support@exeedge.cx with “Privacy request” in the subject line, or open a private account support request. Avoid posting personal information in public community channels.