Privacy Policy

Who is responsible

PyroSoft Productions, Inc. is the controller for pyrosoft.pro and its main-site accounts. Contact support@pyrosoft.pro or write to our registered business mailing address: c/o Harvard Business Services, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA. Michael Rodriguez-Thomas (MikeTheTech) is the responsible person. Other PyroSoft services and product sites have separate policies.

Accounts and verified purchases

Google sign-in supplies an account identifier, verified email, name and an optional profile-photo URL. We use these to identify your account, display your profile and maintain access. Loading your Google photo also contacts Google’s image service. We do not receive your Google password or request your Gmail, contacts or Drive files.

We store session and sign-in verification records, product entitlements, purchase-source references and verification status. For supported itch.io purchases, we send your verified email or a receipt key that you submit privately to itch.io to check ownership. The service does not retain the plaintext receipt key. A purchase from another store remains subject to that store’s policy.

Google remains the primary identity. If you choose to link itch.io, we record its stable user ID and username, verify supported purchases and allow secondary sign-in to that same account. Linking is explicit; matching email addresses do not automatically merge accounts. The OAuth access token is used for the profile check and is not retained.

Devices and support

Supported apps may send a device identifier, device name, product, activation status and last-check time to maintain licensing. This does not mean every PyroSoft product is integrated with this website. Support emails, contact messages and private Discord tickets contain the information you choose to provide. Please avoid sending passwords, full payment-card details or unrelated sensitive information.

Website operation and security

Requests expose an IP address, browser information and the requested resource to the hosting infrastructure. We use necessary operational records and rate-limit evidence to deliver the site, diagnose failures and prevent abuse. Account and receipt actions use protections such as session checks, CSRF checks and restricted logging. Necessary sign-in and preference storage is described on Cookies and browser storage.

Analytics and advertising choices

Google Analytics 4 measures usage and Meta Pixel measures advertising across page categories. Our small Approve/Reject panel uses automatic regional detection; there is no region picker. Tracking defaults off only when detection specifically identifies the EU/EEA, UK or Quebec. Other locations, unknown locations and detection failures default to opt-out, so applicable measurement can start without waiting for a button click. Saved choices, Global Privacy Control and Do Not Track override those defaults. You can reject optional tracking or revisit Privacy & cookies at any time.

Measurement uses a separate PyroSoft origin. Google Analytics receives readable public page paths and titles, sanitized referral sources and ordinary campaign labels; private account flows use general labels. Anonymous browser/session cookies on measurement.pyrosoft.pro can last up to 180 days after a measured visit. Google Signals and advertising personalization remain disabled. We do not send callback codes, query strings, private download links, receipt/license keys, names, email addresses, account IDs or customer content as measurement parameters. Providers can receive network information, including IP address, when contacted. Advertising measurement may count as sale, sharing or targeted advertising under applicable privacy law. This describes the site’s configured controls; it is not a claim that the default satisfies every jurisdiction.

Purposes and legal bases

We use account and licensing information to provide the service you request and perform applicable contracts; operational and necessary security information for legitimate interests in a reliable, secure service; records needed for accounting or law for legal obligations; and nonessential tracking on the basis required for the purpose and your region, including consent where required. You can withdraw consent without affecting earlier lawful processing. We do not make decisions producing legal or similarly significant effects solely through automated profiling.

Recipients and international processing

Necessary information is handled by our hosting and technical providers, Google for identity and optional profile images, itch.io for purchase verification, and the email or Discord services you use to contact us. When enabled under your applicable choices, Google and Meta also receive tracking information. A store handles its own checkout and customer data under its policy. We may share limited records with professional advisers or authorities where needed for a lawful obligation or dispute.

Information is processed in the United States and may be processed in other countries by providers. Where a transfer is subject to legal safeguards, the applicable safeguards must be used. Contact us for information about the safeguards relevant to your request.

Older page content may also request Google Fonts or cdnjs-hosted icons; those providers receive request network information. This is separate from the self-hosted shared header and footer fonts.

How long information is kept

• Account and license records: until a verified deletion request, subject to separate record-keeping obligations and explained licensing consequences.
• Purchase, refund and related tax records: 10 years after the transaction; longer only where required by law or needed for a dispute.
• Routine identifiable main-site web logs: the new minimized log is cleared after 30 days or when its soft 16 MiB threshold is reached; the approved maximum for routine identifiable logs is 90 days. Shared and historical infrastructure records require separate review.
• Selected security or audit evidence necessary for fraud prevention or a dispute: up to 3 years, with longer retention only for an active matter or legal requirement.
• Support emails, contact messages and Discord support tickets: up to 3 years after the last interaction, longer only for an active dispute or legal requirement.
• Future routine account-data backups: a rolling period of up to 90 days. Older recovery archives require separate review and are not represented as already deleted.
• Genuinely anonymous traffic totals may be retained longer.

Sign-in sessions can last up to 7 days. Short-lived authentication records have their own expiry. The periods above are our retention policy. Request/case and support handling is manual. Historical or shared records are reviewed separately; we do not claim they have already been purged. Lawful holds can require selected records to be kept longer.

Privacy requests and complaints

Depending on the law that applies, you may request access, correction, deletion, a portable copy, restriction or objection; withdraw consent; opt out of sale, sharing or targeted advertising; or appeal a decision. Signed-in customers can use Your account data to request review of an export or deletion. You can also contact support@pyrosoft.pro, including when you cannot sign in. Requests are reviewed; submitting a form does not itself erase data. We verify identity, explain any lawful refusal or retained records, and confirm licensing consequences before deletion.

Prepared exports use a recent Google sign-in and a private, one-use download available for 24 hours. Ask support for a reviewed reissue if a transfer is interrupted. Authorized agents may contact us where permitted. We aim to acknowledge requests within 10 business days and answer within one calendar month, sooner where required. We explain any lawful extension before the deadline. You can ask us to review our response or complain to your competent privacy regulator. We do not discriminate against you for exercising a privacy right.

Age and children

The terms require the legal age applicable in your locale to use the service. We do not operate age verification or collect dates of birth for that purpose. If you believe a child has provided information in circumstances that require removal or other action, contact us so we can assess it.

Changes and contact

For material policy changes, affected account holders receive manual email and an on-site account notice at least 30 days ahead where practicable, with exceptions for urgent legal or security changes. Contact support@pyrosoft.pro with privacy questions.