When you sign in
We record the account, sign-in time, country when supplied by our trusted network, and broad browser, device and operating system categories. We use this history to protect accounts and investigate access problems. The network address and browser identification string are encrypted in our private database and visible only to authorized administrators. Country and device information can be approximate. Sign-in history is normally removed after 180 days; failed administrator attempts after 30 days. Essential sign-in records are separate from the optional choice below.
Your optional choice
If you enable Share insights in My connections, we can count your synced Undermax itch.io licenses and broad areas of this website you visit while signed in. We also count selected actions in the Duelist Upgrade flow, such as viewing the collection or reviewing checkout. These events are linked to your account in our private database and normally removed after 90 days. We do not record page query strings, form text, payment details, or your unrelated itch.io purchases for these insights. Our existing account features can still use your synced license information to show access and prevent duplicate purchases.
The choice starts off. You can turn it off at any time in My connections. Turning it off stops new insight events and removes the optional event history already stored for your account. Purchase, delivery, support and essential security records remain subject to their own purposes and retention periods.
Questions and requests
Undermax, itch.io and PayPal connections use HTTPS. We encrypt itch.io access tokens and the detailed network information described above in our private database; authorized staff can access records needed to run the service. Request access to or deletion of your data, or email [email protected]. Some order or security records may need to be retained where required by law. Our Privacy & refunds notice explains the wider website and purchase handling.