Privacy Policy

Effective date: February 27, 2026

We collect only the information needed to operate CWYN, process transactions, deliver digital products, provide support, and maintain security/compliance.

1) Data categories, purposes, recipients, and retention

CategoryExamplesPrimary purposesRecipient typesRetention baseline
Identifiers & contactName, email, support identifiersAccount/order communication, supportHosting, customer support tools, communications vendorsActive customer lifecycle + legal/operational need
Commercial/order dataProducts purchased, order ID, entitlement status, timestampsFulfillment, accounting, dispute handling, fraud reviewPayments processors, hosting/database vendorsAccounting/dispute/legal retention periods
Payment metadataProcessor IDs, payment status, risk outcomesPayment processing, chargeback handling, abuse preventionPayment processors and anti-fraud servicesAs required for financial controls and legal recordkeeping
Security/device telemetryIP/country signals, request logs, abuse eventsSecurity monitoring, rate limiting, incident responseHosting/security tooling providersLimited-duration operational/security windows unless needed for investigation
Support communicationsMessages, troubleshooting details, attachmentsResolve support issues and improve service qualitySupport/communications vendorsUntil resolution + reasonable service-quality review period

2) Sources of personal information

3) Sensitive data handling

CWYN does not intentionally collect highly sensitive personal information categories unless required for legal or fraud-prevention reasons. CWYN does not store full card numbers or CVV. If sensitive data is received unintentionally (e.g., in support messages), access is restricted and the data is deleted or minimized where feasible.

4) Sale/share/targeted ads + GPC

CWYN does not sell personal information for money and does not share personal information for cross-context behavioral advertising. Global Privacy Control (GPC) and similar universal opt-out signals are honored where legally required.

5) U.S. state rights and operational process

Depending on your state, you may have rights to access, correction, deletion, portability, opt-out (where applicable), and appeal.

6) International transfers

Data may be processed in multiple countries. Where required, we apply contractual and technical safeguards for cross-border transfers and enforce least-privilege access controls.

7) Children

This site is not intended for children under 13, and we do not knowingly collect data from children.

8) Security

We use administrative and technical safeguards (including access controls and logging). No method of transmission or storage is 100% secure.

9) Changes

We may update this policy from time to time. Changes are effective when posted with a revised effective date.

Contact · International Rights · ← Back to Home