Privacy and use
Your account data
We use your username, sign-in information, orders and delivery records to manage your account and orders. Passwords and recovery codes are protected rather than stored as readable text. For V-Bucks top-up orders we ask for your Epic login details in a secure field on the order page (not in the chat), only to complete the top-up; they are stored encrypted, opened by the team only while topping up, and deleted automatically when the top-up is completed or 72 hours after you send them, whichever comes first. You may add an account photo and link a verified email when the email service is available, for purchase notifications and account recovery.
Licensing and optional linking
To manage the one-device software license, we retain a protected device identifier, license status and activation dates. Discord linking is optional. We keep the linked account identifier to connect support with your orders. Linking does not give the store team your Discord password.
Conversations and reviews
An order conversation is available to the order owner and authorized staff handling delivery and support. A Discord ticket shares the order reference with support, and a copy of the conversation may be retained for follow-up. Published reviews show their text and rating with your account name and photo, if available, on the website and Discord. Payment details and order references are not included in public reviews.
Payment and service providers
Card details are entered on the payment provider’s page. We do not store your card number or security code. Hosting, payment and email providers help deliver the service and receive the data needed for those purposes. Discord and Instagram also apply their own privacy policies when you use those platforms.
Preferences and usage measurement
We use necessary sign-in cookies and browser storage for your cart, currency, language and theme preferences. A third-party provider estimates your country from your network address to choose a display currency, which you can change manually. We measure store, product, cart and checkout visits to improve the service, using a 30-minute measurement session, without storing your network address in those analytics. To know which link brought you (for example Instagram or Discord), we keep one cookie, rsk_src, for 30 days that holds the source name only. We respect browser Do Not Track signals and may process limited connection information to protect accounts and prevent abuse.
What we keep and why
We keep your account data (username, and email, Discord identifier and photo if you add them), your order and payment records (product, amount, currency, status and payment reference), order conversations, ticket copies and reviews, and your account activity and device list (a device description, without your network address). We need this data to deliver your orders, support you, protect your account and prove transactions.
How long we keep it
Account, order, conversation and ticket records are not deleted automatically: they stay while the account exists and until a deletion request is carried out. A sign-in session ends after one day, or 30 days if you choose to remember the device. Visit measurement sessions are deleted after 90 days; aggregate counts that identify no one remain. Daily backups are replaced within two days, and older manual backups may be kept to restore the service after a failure.
Who processes your data
Ziina: the payment page and card details; it receives the amount, currency and order description from us. Discord: when you sign in with or link it, and for tickets and notifications through the RSK bot. Hostinger: hosting for the site, its data and email. country.is: receives your network address to estimate your country and display currency. Instagram (Meta): when you message us there. We do not sell your data, and we share with these providers only what these purposes need.
AI assistance
The RSK team uses AI tools from Anthropic (Claude) to run and support the store, and order and support records may pass through them when preparing reports and draft replies. When the automated assistant for Instagram messages is switched on, it receives the text of your message with anything resembling secret data masked, and it keeps the last 12 messages per customer for 30 days.
Access, correction and deletion requests
You can download a copy of your data from your profile and ask support to correct it. To delete your account, use “Request account deletion” in your profile or contact support: the request is recorded and the team reviews it by hand after verifying account ownership. Nothing is deleted automatically, and you can cancel the request before it is carried out. Some transaction records may need to be retained to meet applicable obligations.
If there is a security incident
If we learn of unauthorized access to your data, we stop its cause and assess what was affected, then tell the owners of affected accounts what happened and what they should do by email, Discord or the site, and we inform the competent authorities where the law requires it.
Account responsibility
Keep your password and recovery code private. Fraud, bypassing payment, infringing others’ rights and reselling or publishing files without the rights holder’s permission are not permitted.
Policies that apply to your order
The product details and policies shown at the time of purchase apply to that order. Later changes do not remove rights attached to earlier orders. These policies do not exclude mandatory rights under applicable law.