Privacy Policy

What we collect

The minimum required to deliver and protect the product:

• Account: the email address you register with and (if you link it) your Discord ID.
• Hardware ID (HWID): a derived fingerprint of the machine running the loader, used to bind your key to one set of hardware and to enforce HWID-reset cooldowns.
• Payments: the public crypto transaction id and the wallet you paid from, retained for billing reconciliation and chargeback protection.
• Operational logs: server-side request logs (IP, user-agent, timestamp) retained no longer than 30 days for abuse and fraud prevention.

What we don't collect

• No KYC. No legal name, no government ID, no address.
• No third-party analytics or advertising trackers on the site.
• No telemetry from the loader beyond what is needed to enforce HWID binding and serve updates.
• No game-side data, chat, or screenshots.

How long we keep it

Account data is kept while your account exists. Payment records are retained for as long as required to handle billing disputes (a minimum of 12 months from the transaction). Operational request logs are rotated at 30 days. You can delete your account from the dashboard, which removes account data and unbinds active keys; we retain payment transaction records as required for accounting.

Who we share it with

We don't sell data. Limited disclosure is made only to:

• Infrastructure providers strictly required to deliver the product (hosting, content delivery, transactional email). These see request-level data, never your payment data.
• Crypto on-chain data (public by design) is observable by anyone on the relevant chain. Whyper records only the transaction id and paying address.
• Legal compulsion: if a valid legal order from a jurisdiction we are subject to demands disclosure, we comply with the minimum data required and notify the affected user where the order permits.

Cookies

We use first-party cookies only for the session you create when logging in. No cross-site tracking cookies, no advertising identifiers, no pixel tags. The site sets no cookies until you log in.

Your controls

• Access & export: request a copy of the account and payment data tied to your email through Discord support.
• Correction: update email or Discord linkage directly in your dashboard.
• Deletion: deleting your account in the dashboard erases account data and unbinds active keys. Payment transaction records are retained per the section above.

Security

Site traffic is HTTPS-only with HSTS preload. Sessions are short-lived and bound to the device that signed in. We don't store plaintext passwords. We don't store payment card data, since we don't accept cards.

Changes

Material changes are announced in the Whyper Discord at least seven days before they take effect.

Contact

Privacy questions or requests: open a ticket in the Whyper Discord at discord.gg/whyper.