Privacy notice

1. Scope and responsibility

This notice describes information used by the CheatGateway website, merchant workspace and sandbox. The controller’s legal identity, location and direct privacy contact remain to be confirmed. This notice must be completed with those disclosures and the operator’s applicable legal requirements.

2. Information collected

• Account name, email address, password hash, role, authentication settings and session records.
• Business names, contact details, operating country, storefront, products, expected volumes and application responses.
• Documents you choose to upload for review, support tickets, messages, review decisions and status history.
• API-key hashes and display prefixes, permissions, expiry, usage times, and sandbox payment amounts and synthetic references.
• Request and security information such as IP addresses, timestamps, authentication attempts, rate-limit counters and administrative audit records.

Do not submit card numbers, security codes, bank login credentials or unnecessary sensitive information. Sandbox references must contain synthetic order identifiers only.

3. Purposes and legal bases

Account, application and support information is used to provide the service you request, communicate about that request and prepare a potential business relationship. Security and audit information helps prevent misuse and protect users. Information may also be retained or disclosed to meet applicable legal obligations.

Where a law requires a specific lawful basis, the operator must confirm the basis for each purpose, including any contractual necessity, legitimate interest, legal obligation or consent. Accepting website terms is not blanket consent to unrelated processing or marketing. No marketing opt-in is included in registration.

4. Service providers and access

Authorised administrators can review merchant applications and support requests. Hostinger provides application and database hosting. Cloudflare provides DNS, traffic protection and encrypted edge delivery. The homepage currently requests fonts from Google Fonts, which receives the browser’s network request information; workspace and documentation fonts are hosted with the site.

We do not provide personal information to a payment processor through this application while live processing is disabled. Additional recipients and any required disclosures must be assessed before activation. The current application contains no advertising or analytics tracking integration.

5. Storage and retention

Account and application data is stored in the hosted database. Uploaded documents are stored privately outside the public website directory. Passwords and API keys are hashed; sessions use encrypted cookies. These protections do not mean all uploaded content is encrypted at rest.

Records remain available while needed for account operation, application review, support, security or applicable retention obligations. Closing an account does not automatically erase legal or security records or all backup copies. A documented retention schedule and deletion process, including specific periods and backup handling, remain to be confirmed by the operator.

6. International handling

Hosting, network protection and font delivery may involve service infrastructure outside your country. The operator must confirm hosting locations, relevant transfers and any legally required safeguards before this notice can be treated as complete.

7. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or receive a copy of your personal information, to object to certain uses, and to complain to the relevant data-protection authority. Verification may be needed to protect your account. Rights can be subject to legal exceptions.

Existing users can request help through workspace support. A direct privacy contact accessible without an account is awaiting operator confirmation. Do not register solely to exercise a privacy right. No automated decision-making with legal or similarly significant effects is implemented in the application-review workflow.

8. Cookies and updates

See the cookie policy for essential browser storage. This service is intended for adults acting for businesses. Updates to this notice will be dated; new uses requiring consent must not begin without that consent.