DUMPT
Dashboard
Legal

Privacy Policy

Last updated 13 October 2026

Short version: we store your Discord ID, username, avatar and e-mail, your plan and license keys, a log of the operations you ran (file names, status, timing), and payment records from Stripe — never card numbers. Files you process in the desktop app stay on your machine, except code you choose to send to the AI Cleaner. You can export or delete everything from Settings.

1. What we collect

  • Discord profile — when you sign in: Discord ID, username, avatar, e-mail address, and (for role sync) which of our server's roles you hold. We request the identify, email and guilds scopes.
  • Plan and keys — the plan you bought, start and end dates, each license key issued to you, the hardware ID it is bound to, the IP address last seen using it, and daily usage counts.
  • Operation history — for each decrypt and 3D fix run through the desktop app or the Discord bot: the file name, size, result, duration and time. We do not keep the files themselves on our servers after the operation completes.
  • Payments — Stripe session and customer identifiers, plan, amount, currency, status and timestamps. Card details are handled entirely by Stripe.
  • Settings — notification preferences and interface language.
  • Technical logs — standard web-server logs (IP, user agent, path, time) kept for security and debugging.

2. Why we use it

To run the Service: authenticate you, issue and validate keys, enforce quotas, show your dashboard, process payments and grant Discord roles. To support you: investigate failed operations and refund requests. To protect the Service: detect key sharing, abuse and fraud. To keep you informed: receipts, expiry reminders and release notes, each of which you can switch off in Settings except transactional receipts required by law.

3. Who sees it

  • Stripe processes payments and receives your e-mail for receipts.
  • Discord is the identity provider and the channel for DMs and role sync.
  • AI providers (Groq, Mistral, Google Gemini) receive the code you explicitly submit to the AI Cleaner, under their own privacy terms. Nothing is sent unless you use that tool.
  • Hosting providers store our database and serve the website.

We do not sell personal data and do not run advertising. We disclose data when required by law or to defend our legal rights.

4. Retention

Account and key data are kept while your account exists. Operation history is kept for 12 months, then aggregated. Payment records are kept for as long as accounting law requires (typically 7 years). Web-server logs are kept for 30 days. Deleting your account removes your profile and revokes your keys immediately; payment records are retained in anonymized form where the law allows.

5. Your rights

Depending on where you live (including the EU/EEA, UK, California and Vietnam) you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to complain to a supervisory authority. Your dashboard lets you export your history as CSV and delete your account from Settings. For anything else, contact us (section 7) and we will respond within 30 days.

6. Cookies and local storage

We set one essential cookie, token, which keeps you signed in for 7 days. It is httpOnly and SameSite=Lax. The browser's local storage remembers your interface language and whether the sidebar is collapsed. There are no analytics or advertising cookies.

7. Contact

Privacy questions and data requests: the DUMPT Discord server, support channel, or the contact e-mail listed in that server's information channel.