Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data AlgoCheat (algocheat.com) collects, why, and what rights you have. It applies to visitors and customers worldwide, including under the EU and UK General Data Protection Regulation (GDPR) and California law.

1. Who is responsible for your data

The controller of your personal data is:

For any privacy question or request, email us at the address above.

2. What we collect

• Order data: your email address, name, billing country and address, VAT ID (if you enter one), the products you bought, the amount paid and when you paid. You enter these on the Stripe checkout page, and Stripe passes them to us.
• Payment data: card and other payment details are collected and processed by Stripe only. We never receive your full card number.
• Emails you send us: your email address, your message and any files you attach, for example a video clip you send us to test a product.
• Technical data: your IP address, browser type and the pages you request are recorded in server logs when you visit the site.
• Your cookie choice: when you accept or reject cookies we keep a record of it: a random ID, what you allowed and what you refused, your IP address, browser type, the page you were on and the time. If you go on to pay, or try to, we link this record to your order.
• Analytics and advertising data (only for what you allow in the cookie settings): online identifiers stored in cookies (a Google Analytics client ID, a Meta browser ID and, if you came from a Meta ad, a click ID), the pages and products you view, when you start checkout and what you buy. When you start checkout we also keep these identifiers with your order and, if you allowed sending data for advertising, your IP address and browser type, so that we can report the purchase to Google and Meta.

3. Why we use it and our legal basis

• To process your order, deliver your download, send the order confirmation and resend download links when you ask (performing our contract with you, Art. 6(1)(b) GDPR).
• To keep accounting and tax records (a legal obligation, Art. 6(1)(c) GDPR).
• To answer your messages, keep the site secure, prevent fraud, fix errors, and establish or defend legal claims (our legitimate interests, Art. 6(1)(f) GDPR).
• To measure how visitors find us and which of our ads lead to purchases, and to improve those ads (your consent, Art. 6(1)(a) GDPR). You can withdraw consent at any time, for analytics, advertising or any single setting, with the "Cookie settings" link at the bottom of the page. Withdrawing doesn't affect processing that happened before.
• To be able to show which cookies you agreed to (our obligation to demonstrate consent, Art. 7(1) GDPR, and our legitimate interest in doing so, Art. 6(1)(f) GDPR).

You need to provide your email address and payment details to buy a product. Without them, we cannot complete the order.

4. Who we share it with

We don't sell your personal data. We share it with service providers that help us run the shop, only as far as they need it, and, if you accept cookies, with Google and Meta for analytics and advertising:

• Stripe handles payments, tax calculation and fraud checks. It acts as an independent controller for some of this processing; see the Stripe Privacy Policy.
• Twilio SendGrid sends order and download emails.
• Amazon Web Services stores the product files.
• Sentry collects technical error reports so we can fix problems.
• Our hosting provider runs the servers the shop is on.
• Google (Google Ireland Limited and Google LLC) provides Google Tag Manager, Google Analytics and Google Ads. With your consent, it receives the analytics and advertising data described above, including your purchase.
• Meta Platforms Ireland provides the Meta Pixel and Conversions API. With your consent, it receives the advertising data described above and, when you buy, your email address in hashed (scrambled) form, so it can match the purchase to an ad you saw. Meta acts as a joint controller with us for collecting and sending this data, and as an independent controller for what it does with it afterwards; see the Meta Privacy Policy.

We may also disclose data to authorities when the law requires us to.

5. Transfers outside the EEA

Some of these providers, including Google and Meta, are based in the United States or process data there. When they do, the transfer is covered by the EU-US Data Privacy Framework (and its UK extension) if the provider is certified under it, or otherwise by the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Order and invoicing records are kept for 5 years from the end of the year in which they were created, as Polish tax law requires.
• Emails and files you send us are kept for as long as we need them to handle your request, and deleted within 12 months after that. Test clips are deleted within 30 days.
• Server logs are kept for up to 30 days.
• Your cookie choice is remembered for 6 months, after which we ask again. If you reject all optional cookies, we ask again on each page you open. Analytics and advertising identifiers kept with your order are deleted when you ask us to delete your data. Google and Meta keep the data they receive according to their own policies and the retention settings of our accounts (at most 14 months for Google Analytics).

7. Your rights

Under the GDPR, you have the right to:

• get a copy of your personal data (access and portability),
• have incorrect data corrected,
• have your data deleted or its use restricted, unless we have to keep it by law,
• object to processing that is based on our legitimate interests.

To use these rights, email us. We will answer within one month. You can also complain to a data protection authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa). You can also go to the authority in the country where you live or work; in the UK, this is the Information Commissioner's Office.

We do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects. Stripe runs automated fraud checks on payments, as described in its own privacy policy.

8. California residents

We do not sell your personal information. If you accept cookies, we share it with Google and Meta for cross-context behavioral advertising, which the California Consumer Privacy Act treats as "sharing". To opt out, turn off Advertising in "Cookie settings" at the bottom of the page; nothing is shared for advertising until you accept. The categories of data we collect, where they come from, why we use them and who we share them with are listed above. You can ask to see, correct or delete your data by emailing us. We will not treat you differently for doing so.

9. Cookies

This site uses cookies that are strictly necessary for it to work, for example to protect forms from forgery. Your cookie choice is remembered for 6 months in your browser's local storage (cc_cookie) and in a tracking_consent cookie.

Only for what you allow, we also use cookies from Google and Meta. The settings follow Google's consent types, and each can be switched on or off on its own.

Analytics

• _ga, _ga_*, _gid (Google Analytics): tell visits apart and measure how visitors use the site; kept up to 2 years.

Advertising

• _gcl_* (Google Ads): link visits and purchases to the Google ads that led to them; kept up to 90 days.
• _fbp, _fbc (Meta): link visits and purchases to the Meta ads that led to them; kept up to 90 days.

Functionality and Security let Google's tags store data that supports site features or protects against fraud. We don't set any cookies of our own for these.

Until you choose, and if you reject, none of these are set. Google Tag Manager is still loaded, and Google's tags send it measurements without cookies or other identifiers stored on your device (for example that a page was viewed, with your IP address and browser type as in any web request), which Google uses for aggregate statistics. You can change your choice at any time with the "Cookie settings" link at the bottom of the page. The Stripe checkout page, which is hosted by Stripe, sets its own cookies for payment and fraud prevention.

10. Children

The shop is not directed at children under 16, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy. When we do, we change the date at the top of this page. If a change is significant, we will also tell customers by email.