Privacy Notice
This notice explains how GUISHI / XXECLUB (“we”, “us”) handles personal data for xxeclub.com, our Discord community and the license, order and support services we operate there.
1. Who is responsible
GUISHI / XXECLUB is responsible for the processing described here. You can contact us by opening a support ticket in our Discord community. We answer privacy requests through the same channel.
2. What we collect and why
| Activity | Data | Purpose |
|---|---|---|
| Website and downloads | IP address, requested page, timestamps and basic technical logs from your browser and our hosting provider. | Serve the site and downloads, keep them secure, diagnose failures and prevent abuse. |
| Discord community | Discord user ID, server membership, roles, messages and requests you send to our tools or staff. | Welcome members, manage access, answer requests and moderate the community. |
| Licenses and entitlements | License and order references, product, status and expiry; for device-bound products, the device identifier used to validate the binding. | Check license status, deliver access and handle binding or delivery problems. |
| Paid orders | Order and invoice references, product, amount, currency, payment confirmation and refund or dispute status from the checkout provider or the public blockchain transaction. | Confirm payment, fulfil the order and manage accounting, refunds and disputes. |
| Support requests | Contact details, order or claim reference, messages and attachments you choose to provide. | Investigate and answer your request. |
| Free license campaign | Discord ID, membership age, account age, verification role, license status, public YouTube top-level comment text and author channel identifier for the designated campaign video. | Verify eligibility and the one-time code, prevent duplicate claims, deliver the license, and detect abuse. |
We use Discord account and membership data to check access, and order and license references to identify the product and confirm delivery. Do not post passwords, full license keys, verification codes or private logs in public channels.
3. Legal bases
- Contract: to provide the community, licenses and paid orders you request.
- Legitimate interests: to secure the service, prevent fraud and abuse, and answer support requests.
- Consent, where we ask for it: for example, if a feature requires your agreement. You can withdraw consent at any time for future processing.
- Legal obligation: to keep records where the law requires it.
4. YouTube API Services
For the free license campaign we use YouTube API Services to read public top-level comments on the campaign video. We look for the one-time code and check the video and the author’s public channel identifier to verify the claim and detect duplicates. By using this feature you agree to be bound by the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.
Your comment is public once you post it. You can delete it with your own YouTube account controls. To ask us to delete campaign data we hold, open a support ticket; we delete applicable YouTube API data as soon as possible and within seven calendar days of a verified request. Some license and order records may be kept separately where needed for legal or accounting reasons.
5. Who receives data
Authorized staff and service providers receive only what they need:
- Discord provides the community, interactions and private messages. See Discord’s Privacy Policy.
- Cloudflare hosts xxeclub.com and provides DNS and security services.
- Stacked processes card payments for orders paid by card. The checkout identifies the payment service used for your order.
- Public blockchains process crypto payments. Transaction references, wallet addresses and amounts can be visible on the network; a request to us covers the records we control.
- YouTube / Google provides the comment data used for campaign verification.
- OpenRouter provides AI-model processing used to summarize patch notes and answer support questions.
We may disclose information where required by law.
6. Retention
- Website and security logs: short-lived, unless needed to investigate an incident.
- Discord and campaign verification records: while needed for the campaign, abuse prevention and disputes; campaign comment data is removed as described above.
- License and order records: for the life of the license and afterwards as required for accounting, dispute resolution or legal obligations.
- Support messages: for as long as needed to resolve the request and keep a record of the outcome.
7. Your rights
Where the law applies, you can ask for access, correction, deletion, restriction, portability or object to processing. Open a support ticket and explain the request; we may ask for information needed to verify that it concerns your account. You can also complain to the data protection authority of your country of residence or work.
8. Changes
We may update this notice to reflect changes in the service or the law. The effective date at the top shows the current version.