Privacy Policy

01Who is responsible

Specter DMA is owned and run by dmarebrands. This policy covers this store at specterdma.cc: your store account, checkout and orders, support tickets, the chat assistant and the emails we send and receive.

The customer dashboard at dash.specterdma.cc, the loader, the in-game menu and the web radar are run by dmarebrands. Your dashboard account, hardware locks, loader data and menu settings are covered by the dmarebrands privacy notice.

For anything about privacy, open a support ticket or email support@specterdma.cc.

02What we collect

Visits. Cloudflare and our web server log every request: your IP address, the time, the full address you opened, the page you came from and your browser. We use no analytics, tracking pixels or advertising cookies. The only outside script is our card payment processor's form, on the checkout and card payment pages.

Store account. Checkout asks for an email address. We create a store account for it when the invoice is made, even if it is never paid, and send your keys and first password there once you have paid. We store the email address, a salted password hash, when and from which IP address the account was made, when you last signed in with your password, and whether you get sale and review emails. Each sign-in session is stored as a hash with its IP address, how you signed in and when it was last used. Password reset links are stored as hashes and expire after an hour.

Sign-up and captcha. You can also make a store account with just your email address. Until you confirm it we keep the address, your IP address and the page language, and we delete that record 7 days after the link is used or expires. Our sign-in, sign-up, password reset, card payment and chat forms use a captcha that runs on our own server. It checks your IP address and browser and keeps a random identifier in your browser's storage, to stop automated abuse.

Orders. For each purchase we store what you bought, the amount, any code you used, the email address given at checkout, your IP address, the keys delivered and the payment details. For crypto that is the coin and network, the payment address, and the payment processor's reference and status updates. For cards it is the card brand, the last four digits, the expiry date, the type of card, the country it is from, the billing postcode and country, the payment reference and a card fingerprint: a code our card payment processor makes from the card number, so the same card can be recognised again without anyone seeing the number. We also keep the checks on the payment: whether you confirmed it with your bank (3D Secure), whether the security code, postcode and address matched, and the processor's fraud score.

Card payments. You type your card details into a secure form run by our card payment processor. It uses them, together with your IP address and browser details, to take the payment and to stop fraud. With each card payment we also send it your email address, IP address, store account number, device cookie, the terms version you agreed to and what you bought. We never see or store your full card number.

Order records. To stop fraud and to answer chargebacks, we keep a log for every order. At checkout it records your IP address and its country, your browser and the languages it asks for, the page you came from, a device cookie and the time you ticked the box agreeing to our terms. Card checkouts also record your time zone, screen size and colour depth, platform, number of processor cores, memory and touch support, and a fingerprint made from those. After that, the log records each time the order page is opened, when keys are copied, emailed and opened from your account, when the setup guide is opened and each time you sign in to the store, with the time, IP address, browser and device cookie. For card orders we also check each key with dmarebrands for up to 120 days and log when it was redeemed, the dashboard username it went to, which PCs it was locked to and when, and when it was last used.

Emails. For every email we send we keep the recipient, the subject and the delivery result, and a copy for 30 days so support can see what was sent. Copies have passwords and private links taken out, but they still show your keys. For order emails, the mail server's reply is also kept in the order log. If you have not reviewed that game yet, we email you once, a day after your keys arrive, to ask for a review. We also email you about sales and discount codes. These sale and review emails are on by default, and you can turn them off at any time in your account or with the unsubscribe link in any of them. When we send a sale email we record who it went to, so nobody gets the same one twice, and we choose who gets it by what they bought and when.

Reviews and codes. A review shows the name you choose (or "Specter DMA Customer"), your rating, your text and the date, on this site and in search results. Your email, account and order stay private. A review within 48 hours of delivery, or within 24 hours of our review email, earns a 20% off code. Codes are bound to your email address and account. If you have not reviewed a game 7 days after delivery, we add an automatic 5-star rating for it under "Specter DMA Customer", marked as automatic.

Support tickets. When you open a ticket we store its subject, topic, the product and invoice you pick, every message, the files you attach, who wrote each message and when, and when you last read it. Our staff see it together with your email address, how many orders you have, what you have spent and your recent invoices. We email you when we reply to a ticket you opened on this site and when we close it.

AI in support. The chat on this site and Specter AI in tickets are answered by an AI model. In the chat we store your questions, the answers, the page you were on, your language, your store account if you are signed in, and a hash of your IP address so we can limit abuse. In a ticket, the AI reads the conversation, up to four attached images and the orders on your account, including the card brand and last four digits, so it can help, and it writes summaries for our staff. It also reads new messages to tell whether they need a reply, even when its answers are turned off. You can turn its answers off for one ticket or for your whole account. Emails to support@specterdma.cc are read by the AI too, to sort out spam and phishing.

Support email. Emails you send to support@specterdma.cc are kept on our mail server and copied into our support inbox with the names of any attachments. We keep them together with our replies.

03Why we use it

• to deliver the keys you paid for and run your store account (performance of a contract);
• to stop fraud, key sharing and chargebacks, and to show your bank what happened with an order if a payment is disputed (legitimate interest);
• to keep the store secure, rate limited and available (legitimate interest);
• to answer support requests, with help from AI (performance of a contract and legitimate interest);
• to ask for one review after an order, send the code you earn for it, show ratings, and email you about sales and discount codes until you turn that off (legitimate interest).

We do not use your data for advertising, and we do not sell or rent it to anyone. Some decisions are automatic: our fraud checks can refuse a card payment, and after a chargeback, card payments are blocked for that card, email address, account and device. Ask in a ticket and a person will look at it.

04Who can see it

• Our staff. Support staff see tickets and, while you have one open, your orders and store account, including sign-in IP addresses. Admins see everything in the store.
• dmarebrands, which owns Specter DMA and runs the dashboard. To create your keys the store sends it the plan and the order reference, never your email or IP address, and for card orders it reads back how the keys are used.
• The crypto payment processor, which receives the price, the coin and the order reference and gives you a payment address. It sees your wallet transaction, as does anyone reading the public blockchain.
• Our card payment processor, which takes card payments and receives the details above. If a card payment is disputed, it and the bank that issued the card receive the records of that order: the order log with IP addresses and devices, your ticket subjects and reviews, and other orders from the same card, account or device.
• Cloudflare, which sits in front of the store for protection and caching and therefore sees your IP address and requests.
• Our AI provider, which processes chats, tickets and support email to write answers and sort mail. It does not use them to train its models.
• Our backups. The store is backed up every day, encrypted, to a storage server we rent.

We do not share data with game developers, publishers or anti-cheat companies, and we hand it to anyone else only when the law requires us to.

05Cookies

The store sets a sign-in cookie that lasts 30 days and a cookie that lets a new buyer open their invoice and account right after paying, which lasts 3 days. When you check out we set a device cookie that lasts two years, so we can recognise the same device on later orders. It is used only to stop fraud and to answer chargebacks. Scripts cannot read these three cookies. Three more cookies remember your language for a year. None of them are used for advertising. On card payment pages, our card payment processor's form may set its own cookies to stop fraud, and Cloudflare may set technical cookies of its own. Your browser keeps your basket, your payment method, the sale notices you have seen and the id of your chat in local storage. The chat id is sent to us so the chat can carry on.

06How long we keep it

• Web server and app logs: about two weeks.
• Rate limit counters: up to an hour.
• Copies of the emails we send, and payment processor notifications: 30 days.
• Chats on this site: 90 days after the last message.
• Order logs and key checks: 540 days, about 18 months, from each entry.
• Your store account, orders and payment details, tickets with their files and transcripts, support emails, reviews and codes: until you ask us to delete them. We may keep what we still need for a payment dispute, fraud prevention or the law.
• Card payment blocks after a chargeback: they do not expire.
• Deleted data can stay in our encrypted backups for up to 30 days.

07Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to a data protection authority. To use any of these, open a ticket while signed in to the account in question or email support@specterdma.cc. We will need to check that you control the account before acting. For your dashboard account, see the dmarebrands privacy notice.

08Security

Passwords are stored only as salted hashes, and sign-in sessions and reset links only as hashes. Traffic to the store is encrypted in transit. Staff see only what their role allows. No system is perfectly secure. If we ever discover a breach that affects you, we will tell you by email as soon as we reasonably can.

09Children

The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, open a ticket and we will remove it.

10Changes

If we change this policy, the date at the top changes with it. If you keep using the service after a change, you accept the updated policy.