Last updated: April 13, 2026
1. Introduction
HYPEX ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, forum, and software (collectively, the "Services").
This policy is compliant with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the ePrivacy Directive 2002/58/EC.
2. Data We Collect
2.1 Website & Forum
When you visit our website or use our forum, we may collect:
- Account information — username, email address, and password (hashed) when you register on our forum.
- IP address — collected automatically when you access our Services.
- Browser and device information — browser type, operating system, screen resolution, and language preference.
- Cookies — essential cookies for session management and optional cookies for preferences. See Section 6.
- Usage data — pages visited, time spent, referral source, and interaction data.
- Payment information — transaction details are processed by our third-party payment providers. We do not store credit card numbers or full payment details.
2.2 Software
When you use our software, the following data is collected:
- IP address — collected during authentication and software usage.
- Hardware information — including hardware identifiers used to create a unique Hardware ID (HWID). This information is used for license binding and security purposes. This information is retained indefinitely.
- Telemetry information — our software may collect telemetry data, including your display content, for the purposes of bug reporting, quality assurance, and software analysis. This information is only periodically collected while you are actively using the software.
- License data — license key, activation timestamps, and software version.
3. Legal Basis for Processing
Under the GDPR, we process your personal data based on the following legal grounds:
- Contract performance (Art. 6(1)(b) GDPR) — processing necessary to deliver our products and services to you.
- Legitimate interests (Art. 6(1)(f) GDPR) — processing necessary for security, fraud prevention, software integrity, and service improvement.
- Consent (Art. 6(1)(a) GDPR) — where you have given explicit consent, such as for optional cookies or marketing communications.
- Legal obligation (Art. 6(1)(c) GDPR) — where processing is required to comply with applicable law.
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide, maintain, and improve our Services.
- To process transactions and manage your license.
- To bind licenses to hardware for security purposes.
- To detect and prevent fraud, abuse, and unauthorized use.
- To provide customer support through our forum and Discord.
- To collect telemetry for bug reporting, quality assurance, and software analysis.
- To comply with legal obligations.
5. Data Retention
- Account data — retained for the duration of your account. Deleted upon request, subject to legal retention requirements.
- IP addresses (website) — retained for up to 12 months for security purposes.
- Hardware identifiers (HWID) — retained indefinitely for license binding and security.
- Telemetry data — retained for up to 24 months, then anonymized or deleted.
- Payment records — retained as required by applicable tax and commercial law.
6. Cookies
We use the following types of cookies:
- Essential cookies — required for the website and forum to function (session management, authentication). These cannot be disabled.
- Preference cookies — store your settings and preferences (theme, language).
- Analytics cookies — help us understand how visitors interact with our website. Only used with your consent.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our Services.
7. Third-Party Services
We may share data with the following categories of third-party service providers:
- Payment processors — to handle transactions securely.
- Hosting providers — to store and serve our website and forum.
- CDN providers (Cloudflare) — for performance and security.
- Analytics services — to understand usage patterns (only with consent).
We do not sell your personal data to third parties.
8. International Data Transfers
Your data may be processed in countries outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Chapter V of the GDPR.
9. Your Rights Under the GDPR
As a data subject, you have the following rights:
- Right of access (Art. 15) — request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — request correction of inaccurate data.
- Right to erasure (Art. 17) — request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations. Note: HWID data tied to active licenses may be exempt from erasure requests where retention is necessary for contract performance.
- Right to restriction (Art. 18) — request restriction of processing in certain circumstances.
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)) — withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us through our Discord server or the customer panel. We will respond within 30 days as required by the GDPR.
You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted data transmission (TLS/SSL).
- Hashed password storage.
- Access controls and authentication requirements.
- Regular security reviews.
11. Children's Privacy
Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
13. Contact
For privacy-related inquiries or to exercise your data protection rights, contact us through our Discord server or the customer panel.