02Legal

Privacy Policy

We collect the minimum needed to sell you a key, lock it to your hardware and keep the service running. We never sell your data.

Last updated 14 September 2026

01Who is responsible

Phantom DMA operates this store (phantomdma.cc) and the customer dashboard (dash.phantomdma.cc). The dashboard, loader and in-game menu run on infrastructure provided by our software platform partner, which processes data on our behalf under this policy. Contact for anything privacy related is our Discord.

02What we collect

Store visits. This site is static. Our CDN and web server keep standard access logs (IP address, time, requested page, browser type) for security and abuse prevention. No analytics, tracking pixels or advertising cookies are used.

Account. When you create an account on the dashboard we store a username, a salted password hash and the time you signed up and last signed in. An avatar is optional. We do not ask for an email address.

Orders. For each purchase we store the product, the plan, the amount, the cryptocurrency used, the payment address and transaction reference issued by the payment processor, and the key that was delivered. We never see or store card details, because we do not take cards.

Licence enforcement. To lock a key to your hardware, the loader reads identifiers from the gaming PC and the second PC (for example the board model and serial, disk and DMA card identifiers). We store a fingerprint derived from them together with the individual values, so we can tell a genuine hardware change from key sharing, plus when the lock was bound and last seen and how many resets you have used.

Security. Sign-ins, loader connections, key redemptions, hardware resets and admin actions are logged with the IP address and time. Rate limiting keeps a short-lived record of recent requests per IP.

Settings. Your menu configuration, saved presets and web radar share links are stored so they follow you between sessions.

Support. If you contact us on Discord we see your Discord handle and whatever you send us. Discord's own privacy policy applies to that platform.

03Why we use it

  • to deliver the key you paid for and keep your account working (performance of a contract);
  • to enforce the hardware lock and stop key sharing, fraud and chargebacks (our legitimate interest in running the service);
  • to keep the service secure, rate limited and available (legitimate interest);
  • to answer support requests (performance of a contract).

We do not use your data for advertising, profiling or automated decisions with legal effect, and we do not sell or rent it to anyone.

04Who can see it

  • Our software platform partner, which hosts the dashboard, the loader backend and the licence database and processes the data above on our behalf.
  • The payment processor, which receives the payment amount and generates the payment address. It sees your wallet transaction, as does anyone reading the public blockchain.
  • Cloudflare, which sits in front of the store and dashboard for DDoS protection and caching and therefore sees your IP address and requests.
  • Discord, if you contact us there.

We do not share data with game developers, publishers, anti-cheat vendors or anyone else, and we will not hand it over unless legally compelled to.

05Cookies

The store sets no cookies. The dashboard sets one session cookie so you stay signed in; it is limited to the dashboard hostname, is not readable by scripts and expires when the session does. Cloudflare may set its own technical cookies for bot protection. Your browser may keep a few preferences (such as theme) in local storage, which never leaves your device.

06How long we keep it

  • Access and security logs: up to 90 days.
  • Rate limit counters: minutes.
  • Account, orders, keys and hardware identifiers: while the account exists, and for up to 12 months after the last key expires so we can handle disputes, replacements and fraud checks. After that they are deleted or anonymised.
  • Support conversations on Discord: governed by Discord and by how long the ticket channel stays open.

07Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to a data protection authority. To use any of these, open a ticket on our Discord from the account in question. We will need to verify that you control the account before acting. Deleting an account cancels any remaining key time on it and cannot be undone.

08Security

Passwords are stored only as salted hashes. Traffic to the store and dashboard is encrypted in transit. Hardware identifiers are never shown to other customers and are used only for the lock. Access to the licence database is limited to the people who need it to run the service. No system is perfectly secure; if we ever discover a breach that affects you, we will tell you through the dashboard or Discord as soon as we reasonably can.

09Children

The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, tell us on Discord and we will remove it.

10Changes

If we change this policy the date at the top changes with it. Material changes will also be announced on Discord. Continuing to use the service after a change means you accept the updated policy.