Privacy Policy

This policy explains which personal data we process when you use evade-cheats.com, the EVADE software (loader and menus) and our Discord server, and why. It follows UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who is responsible

The operator of evade-cheats.com (“we”), based in England, is the data controller for the processing described here. For every privacy request, open a ticket in our Discord server.

2. What we process and why

• Account. Email address, display name, a salted hash of your password (never the password itself), account role, creation date and your sign-in sessions. Basis: performing the contract (Art. 6(1)(b) UK GDPR).
• Licenses and devices. License keys you redeem with their status and duration, and a device ID derived from hardware properties of your PC. The device ID is stored only as a keyed hash, not as the raw values. Basis: the contract and our legitimate interest in preventing key sharing and abuse (Art. 6(1)(b) and (f) UK GDPR).
• Software use and security. When the software starts and while it runs, it contacts our servers: license check, version, status signals about the integrity of the software (for example whether it has been modified or analysed) and downloads of software components. We store the technical data of these requests: IP address, user agent, time and the hashed device ID. Basis: our legitimate interest in protecting the software and the licenses (Art. 6(1)(f) UK GDPR).
• Discord. If you link Discord, we store your Discord user ID with your account. Our bot reads your roles in our server and logs joins, leaves, verifications and deleted messages (including their text) for moderation. Tickets and staff applications you submit are saved as transcripts that staff can read, and you receive a copy. Basis: the contract and our legitimate interest in moderation and support.
• Resellers. An authorised reseller can enter a customer email address when creating a key. We store it with the key.
• Server logs. Our web servers log IP address, time, requested address and user agent.
• Cookies. One strictly necessary session cookie, evade_session, keeps you signed in. It is httpOnly and expires after 7 days. It needs no consent under the Privacy and Electronic Communications Regulations (PECR). We do not use analytics, advertising or tracking cookies.

This website does not process payments. We do not sell your data and we do not use it for advertising.

3. Who receives data

• Cloudflare. All traffic to this website and our servers passes through Cloudflare (proxy, encryption, DDoS protection). Cloudflare therefore processes IP addresses and request data.
• Hosting. Our server is operated by a hosting provider in Europe.
• Discord. Our Discord server and bot run on Discord. Discord processes your data under its own privacy policy.

We disclose data to authorities only if the law requires it.

4. Transfers outside the UK

Cloudflare and Discord are based in the United States. Where data is transferred there, we rely on safeguards such as the UK-US data bridge (the UK Extension to the EU-US Data Privacy Framework) or the International Data Transfer Agreement or Addendum issued by the Information Commissioner’s Office. Transfers to Europe are covered by UK adequacy regulations.

5. How long we keep data

• Account data: until you delete your account in Settings. Deleting it removes the account, its licenses, its sessions and the Discord link.
• Activation and security events: 90 days. Downloads and security signals: 180 days. Evidence needed to enforce a ban, such as a banned device ID, can be kept longer.
• Server logs: 14 days.
• Discord transcripts and logs: as long as needed for support and moderation, unless you ask for deletion and nothing stands in the way.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Articles 15 to 21 UK GDPR). To use your rights, open a ticket in our Discord server. We can keep data that we need to enforce a ban or to meet legal obligations. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Security

All connections use TLS, passwords are stored only as salted hashes, and access to personal data is limited to the people who need it.

8. Changes

We may update this policy. The date at the top shows the latest version.