Privacy policy

This Privacy Policy explains how Project Infinity ("we", "our", "us") collects, uses and protects your personal data when you use our website, community and software products. We are the data controller. We are established in Austria and you can reach us about privacy at any time via our contact form. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Austrian data-protection law.

What data we collect

• Account data: your username, email address and password (stored hashed).
• Technical data: your IP address, browser/device information and cookies (see "Cookies" below).
• Order and licence data: the Products you buy, your licences, and a hardware identifier ("HWID") used to bind a licence to one computer.
• Payment data: handled by our payment providers; we receive confirmation and limited transaction details, but not your full card number.
• Profile and content data: anything you choose to add to your profile or post in the community.
• Support data: the content of support tickets and messages you send us.

How and why we use your data (legal bases)

• To create and operate your account and community participation: performance of a contract (Art. 6(1)(b) GDPR).
• To process orders, deliver licences and provide support: performance of a contract.
• To enforce licences (including the HWID lock) and to prevent fraud, sharing and abuse: our legitimate interests (Art. 6(1)(f)).
• To keep the Service secure and functioning: legitimate interests.
• To send order- and account-related emails: contract / legitimate interests.
• To send marketing emails where you have opted in: your consent (Art. 6(1)(a)); you may withdraw consent at any time via the unsubscribe link or your email preferences.
• To comply with legal and tax obligations: legal obligation (Art. 6(1)(c)).

Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate agreements, including:

• Stripe and Mollie: payment processing.
• Cloudflare: content delivery, security and DDoS protection.
• Our email provider: sending transactional and (opted-in) marketing email.
• Discord: if you choose to join our community server, your activity there is also governed by Discord's own privacy policy.

Where a provider processes data outside the EEA, appropriate safeguards (such as the EU Standard Contractual Clauses) are in place.

How long we keep your data

We keep account and order data for as long as your account exists and as required to meet legal and tax obligations (for example, invoice records under Austrian law). Technical logs are kept for a limited period for security purposes. When data is no longer needed, it is deleted or anonymised.

Cookies

We use cookies that are necessary for the site to function (for example, to keep you logged in) and, where applicable, cookies that remember your preferences. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the site from working.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw that consent at any time. To exercise any of these rights, please contact us. You also have the right to lodge a complaint with a supervisory authority: in Austria, the Datenschutzbehörde (dsb.gv.at).

Children

The Service is not intended for anyone below the minimum age set out in our Terms, and we do not knowingly collect data from them.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page.