1. Summary
A licence key, a hashed hardware identifier, and whatever our payment processor needs to take payment. No advertising, no analytics, no trackers, and no reading of your files, chat or keystrokes.
2. Who is responsible
Valen is the controller of the data described here. Contact: support@valen.cx.
3. What we collect
When you buy
- Your email address, collected by our payment processor at checkout.
- A payment reference. We never receive or store your card number.
- The order record: plan, amount, currency, time, and the key issued for it.
When you use the client
- Your licence key, sent on every launch to authenticate you.
- A SHA-256 hash of your hardware identifier — see section 4.
- Request logs: IP address, timestamp, and the licence key.
4. Hardware identifiers
The client sends a hardware identifier so one key runs on one machine. On arrival it is immediately hashed with SHA-256, and only the hash is stored or compared. The raw value is never written to our database or to a log line, and it is not recoverable from the hash.
The hash is kept for as long as the licence is bound to that machine, because it is the binding. Everything else identifying about a request is deleted within 24 hours.
5. What we do not collect
The client sends a licence key and a hardware identifier. That is all. It does not:
- read, upload or scan files on your computer;
- record keystrokes, screenshots or microphone input;
- collect your Minecraft credentials or session token;
- report the servers you play on, your chat, or your gameplay;
- track you across other websites.
6. Why we collect it
- To deliver what you paid for — issuing and authenticating your key. Legal basis: performance of our contract.
- To stop piracy and abuse — machine binding, ban enforcement, rate limiting. Legal basis: legitimate interest.
- To support you — answering tickets, resetting bindings. Legal basis: performance of our contract.
- To keep books — transaction records for tax. Legal basis: legal obligation.
7. Payments
Checkout is handled by our payment processor. Card details go directly to them and never reach our servers. They act as an independent controller for the data they collect, under their own privacy policy.
8. Who else sees it
We do not sell personal data or share it for advertising. Our processors are:
- Our payment processor — payments, receipts and tax handling.
- Our hosting provider — runs the API and website, and therefore stores the database and logs.
- Our email provider — where you contact support.
We also disclose data where legally required, or where necessary to bring or defend a legal claim, including a payment dispute.
9. Retention
- Request logs — deleted within 24 hours.
- Hardware identifier hash — for as long as the licence is bound to that machine.
- Licence records (key, ban status, expiry, creation date) — for the life of the licence, and afterwards where needed to enforce a ban.
- Order and payment records — as long as tax law requires, typically seven years.
10. Cookies
This site sets no tracking or advertising cookies and runs no analytics. The only
thing stored in your browser is a valen-theme entry remembering light or
dark. Our payment processor sets its own cookies on its checkout page.
11. Your rights
If you are in the UK or EEA, and in many other places, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or port it elsewhere. Email support@valen.cx; we respond within 30 days.
Deleting your licence record ends your licence — we cannot authenticate a key we no longer hold. Banned keys and completed transactions are retained after a deletion request, to enforce bans and to meet tax obligations.
You may complain to your local data protection authority.
12. Security
Traffic between the client, the site and our servers is encrypted in transit, and the client payload is encrypted on top of that. Access to the licensing database is limited to the operators of the service. If a breach affects your data we will notify you and the relevant authority as required.
13. Children
Valen is not intended for children under 13 and we do not knowingly collect their data. Email us if you believe we have, and we will delete it.
14. Changes
The “last updated” date reflects the current version. Material changes are announced on the site.
15. Contact
Privacy questions, data requests and complaints: support@valen.cx.