Privacy Policy

This policy explains what personal data Hide & Paint collects, why, and the rights you have. The data controller is Hide & Paint, Norway. We process personal data in line with the EU/EEA General Data Protection Regulation (GDPR).

1. Data we collect

• Account data — your email address, optional username, and, if you sign in with Discord, your Discord ID, username, and avatar.
• Purchase data — order records and what you bought. Card payments are handled by Stripe; we do not see or store your full card number.
• Licence data — your access grants and keys, and a device identifier (HWID) used to lock one account to one machine and prevent sharing.
• Technical data — IP address, timestamps, and basic log data created when you use the service.
• Support data — messages you send us by email or Discord.

2. Why we use it & legal basis

• To provide the service (accounts, access, downloads) — performance of our contract with you.
• Fraud prevention, licence enforcement, and security (including the device lock) — our legitimate interests.
• Accounting and tax — compliance with legal obligations.
• Support and communication — performance of our contract or your consent.

3. Who we share it with

We use trusted processors to run the service, and one advertising partner:

• Supabase — database and authentication.
• Stripe — payment processing.
• Vercel — website hosting and delivery.
• Discord — optional sign-in and our community.
• TikTok — advertising attribution and measurement via the TikTok Pixel (see section 6). Unlike the processors above, TikTok (operated by ByteDance) acts as an independent controller of the data the pixel collects and may process it outside the EEA, including under the EU Standard Contractual Clauses.

We do not sell your personal data. Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

4. How long we keep it

We keep account and licence data for as long as your account is active and as needed to provide the service. Transaction records are retained as long as required by Norwegian bookkeeping law. We delete or anonymise data when it is no longer needed, subject to those legal retention periods.

5. Your rights

Under the GDPR you may request access to, correction of, or deletion of your data; restrict or object to processing; request portability; and withdraw consent where processing is based on it. To exercise these rights, email help@hidepaint.com. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).

6. Cookies & advertising

We use cookies that are needed to run the site — primarily to keep you signed in. In addition, our pages load the TikTok Pixel, an advertising and attribution tool that sets third-party cookies (such as _ttp and _tt_enable_cookie) and reports events like page views, add-to-cart, and completed purchases to TikTok so we can measure our ads. TikTok may use this data for its own advertising and measurement purposes as an independent controller (see section 3). You can limit this tracking with browser settings or extensions that block third-party cookies.

7. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

8. Changes & contact

We may update this policy; the "Last updated" date above shows when. Questions about your data? Email help@hidepaint.com or reach us on Discord. See also our Terms of Service.