Privacy Policy

This policy covers terminusclient.com, the Terminus client and launcher, and the account, licensing, and support systems behind them (together, "the Services"). The short version: we collect what we need to run your account, enforce licenses, and take payments. Website analytics are anonymous. We do not sell your data, and we do not run advertising trackers.

When you register we store:

• Your email address, used to sign in, verify your account, and send transactional mail such as password resets
• Your display name and a numeric user id
• Your password, stored only as a salted hash; we cannot read it
• When your account was created

If you connect an optional third-party account (such as Discord), we store the account identifier needed to keep the link.

Checkout is handled by third-party payment processors for card and cryptocurrency payments. Your card number goes to the processor, never to us; the processor handles it under its own privacy policy. On our side we keep order records: what was bought, the amount, the payment status, any promotional code used, and license keys or entitlements granted.

Your license is bound to your hardware to prevent sharing. When you sign in through the launcher or client we process:

• A device identifier derived from your hardware, used to enforce the license binding you can reset from your dashboard
• The client version and release channel you run
• Error and crash diagnostics, so broken builds get fixed

Sign-in sessions also carry standard security context, such as the IP address and browser or client that opened them, so we can spot suspicious access and you can revoke sessions you do not recognize.

If you open a support ticket or contact us, we keep the conversation and anything you attach to it so we can actually resolve the issue and look back at history when you follow up.

The website runs first-party, anonymous analytics to see which pages get used:

• No analytics cookies, and nothing stored on your device beyond the current browser session
• Your IP address is hashed into an anonymous visitor id at our edge and immediately discarded; it is never stored raw
• Analytics are never linked to your account
• The "Do Not Track" browser setting is honored: with it on, nothing is collected

The site sets a handful of first-party cookies, none of them for advertising:

We use the data above to:

• Provide the Services: accounts, downloads, licenses, and support
• Enforce license bindings and detect sharing, fraud, and abuse
• Process payments and keep required financial records
• Send transactional email such as verification and password resets
• Understand, in aggregate, how the website and client are used so we can improve them

We do not sell your data, and we do not send marketing email.

Data leaves our systems only where running the Services requires it:

• Payment processors, to take payments and handle disputes
• Our email delivery provider, to send transactional mail
• Our hosting and infrastructure providers, which run the servers the Services live on
• Authorities, if a law we are subject to genuinely requires it

No third party gets your data for advertising, and nobody buys it.

Account data lives for as long as your account does. Order records are kept as long as financial and tax rules require. Support conversations are kept so history survives follow-ups. Diagnostic logs rotate out on a short schedule, and analytics exist only in anonymous, aggregated form.

Traffic to the Services is encrypted in transit. Passwords are stored as salted hashes. Session cookies are HttpOnly. Internal access to production data is limited to what operating the Services requires. No system is perfect, but the boring fundamentals are in place.

You can ask us to show you the data we hold on you, correct it, or delete it. Some of it you can handle yourself from the dashboard, such as your display name, password, and device bindings. For everything else, contact us and we will sort it out after verifying the request comes from the account holder. Deleting your account ends your license.

If you are in the EU, EEA, or UK, the GDPR page spells out your rights and our lawful bases. California residents have their own disclosures on the California Privacy page.

The Services are not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

When this policy changes, the date at the top changes with it. Meaningful changes will be called out on the website. Continuing to use the Services after a change means you accept the updated policy.

Privacy questions and requests go to hello@terminusclient.com.