Privacy Policy
This policy explains how personal data is processed on HALGEBRYX. The controller is HALGEBRYX (Lisbon, Portugal). Privacy requests: the Support area of your account.
This text is a draft that has not yet been reviewed or approved. It may change before it takes effect.
1. Data we process
Account data: name, email address and a password stored only as a salted hash.
Order and licensing data: orders, payment references and transaction signatures, wallet addresses used for payment, licenses, and the public key and identifier of the device you activate.
Technical data: IP address and browser information used for security, rate limiting and diagnostics, and records of important account and administrative actions.
Support data: messages and requests you send us.
2. Why we process it
To create and secure your account, to deliver and license the software, to confirm payments, to provide support, to prevent fraud and abuse, to meet legal obligations, and to keep the service running. The legal bases are performance of the contract, legitimate interests in security, and legal obligations.
3. Referral program
If you arrive through a partner link, a first-party cookie remembers the referral for up to 30 days so the partner can be credited when you register. Partners see only anonymised customer codes, not your name or email.
4. Service providers
We use infrastructure and service providers that process data on our behalf: Cloudflare (hosting and file storage), Neon (database), Resend (transactional email), Helius (Solana network access) and Amazon Web Services (license signing). Blockchain transactions are public by nature and cannot be erased.
5. Retention
We keep account data while the account is active. Order, payment and licensing records are kept for as long as required for accounting, legal and dispute purposes, then deleted or anonymised.
6. Your rights
You can request access, correction, deletion, restriction, portability and object to processing, and withdraw consent where processing is based on it. Write to the Support area of your account. You may also complain to your data protection authority (in Portugal: CNPD).
7. Security
We use encrypted connections, hashed passwords, access controls, rate limiting and audit logging. No system is completely secure.
8. International transfers
Some providers may process data outside the European Economic Area. Where this happens we rely on appropriate safeguards such as standard contractual clauses.
9. Changes
This policy was last updated on 2026-10-13. Material changes will be announced in your account or by email.
Last updated: 2026-10-13