Privacy policy

Who we are

grepo.works ("we") operates the Grepoworks storefront and licensing service. For any privacy question or request, contact us via the livechat on this site or by replying to any email we send you.

What we collect

• Account data — the email address and display name you provide at registration, and a securely hashed (never plain-text) password.
• Order & license data — the plans you buy, amounts, payment method, license codes, and a random instance identifier + version your add-on reports when activating.
• Support data — messages you send us in the livechat.
• Affiliate data — if you join the program, your referral code and the sign-ups/sales attributed to it.
• Technical data — a session cookie, a language-preference cookie, and (if you arrived via a referral link) a referral cookie. Your IP address is processed to deliver the site and to rate-limit abuse. To stop the free trial being taken repeatedly, we also store a one-way fingerprint derived from your IP address and browser user-agent when you register and when a trial is activated. It is an irreversible hash — we never store the IP address itself, and the fingerprint cannot be turned back into one.

The add-on itself never collects or transmits your Grepolis username or password — those never leave your browser.

How we use it

To create and secure your account, process payments, deliver and validate your license, send you transactional emails (registration confirmation, email verification and purchase receipts), provide support, run the affiliate program, and protect the service from abuse. We do not sell your data or use it for third-party advertising.

Third parties we share with

• Payment providers — bunq processes card, Wero, iDEAL and Bancontact payments, and PayPal processes PayPal payments; Litecoin payments are settled on the public blockchain. We share only what's needed to take payment.
• Email — if configured, outbound email is sent through the SMTP provider you or we set up (e.g. Google).
• Infrastructure — the site is served via Cloudflare and hosted on a private server; blockchain explorers are queried to confirm Litecoin payments.

Cookies

We use only strictly-necessary cookies: a login session cookie, a language-preference cookie, a short-lived flash-message cookie, and a 30-day referral cookie when you follow an affiliate link. No third-party advertising or tracking cookies.

How long we keep it

Account, order and license records are kept while your account is active and as long as needed for support, accounting and legal obligations. Livechat transcripts are kept to provide continuity of support. You can ask us to delete your account and associated personal data at any time (some records may be retained where the law requires).

Your rights

Depending on where you live (including the EU/EEA under the GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us via the livechat or email; we'll respond within a reasonable time.

Security

Passwords are hashed, stored secrets are encrypted at rest, the site is served over HTTPS, and access to data is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

Changes

We may update this policy; the "last updated" date above reflects the current version.