Privacy Policy

We collect the following types of information:

Account Information: When you register, we collect your first name, last name, email address, country, and a hashed version of your password. We never store plaintext passwords.

Technical Data: We automatically collect your IP address, browser user agent, and session information for security purposes and to provide our services.

File Data: Uploaded and decoded files are retained for account delivery, support, and download history according to your account retention setting. You can delete retained file content from the dashboard.

Payment Information: We record transaction metadata such as amount, provider, payment reference, cryptocurrency network, transaction hash, and status. Stripe and PayPal process their own checkout credentials; we do not receive or store full card or PayPal login details.

We use collected information for the following purposes:

• To provide and maintain our decoding service
• To process your transactions and manage your credit balance
• To authenticate your identity and maintain session security
• To detect and prevent fraud, abuse, and unauthorized access
• To send you service-related notifications (payment confirmations, account alerts)
• To comply with legal obligations and respond to law enforcement requests
• To improve our service and fix technical issues

We implement appropriate technical and organizational measures to protect your personal data:

• Passwords are hashed using bcrypt with a cost factor of 12
• Sessions use cryptographically secure random identifiers
• All communications are encrypted via HTTPS/TLS
• Rate limiting is applied to prevent brute-force attacks
• IP-based blocking is used against suspicious activity
• Stored input and output files are access-controlled and can be deleted from the account dashboard
• Database access is restricted and uses parameterized queries to prevent SQL injection

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Account Data: We retain your account information for as long as your account is active. You may request deletion at any time.

Decode Files and Metadata: File contents needed for delivery and metadata are retained according to the account retention period, which defaults to 14 days. Users can remove stored content earlier from the dashboard.

Transaction Records: Payment records are retained for accounting and legal compliance purposes.

Login History: Login attempts are retained for 90 days for security monitoring.

Session Data: Sessions expire after 7 days and are automatically cleaned up.

Under the General Data Protection Regulation (GDPR) and similar laws, you have the following rights:

• Right to Access: You can export all your personal data from Settings → Data & Privacy in your dashboard.
• Right to Rectification: You can update your profile information at any time from your dashboard settings.
• Right to Erasure: You can permanently delete your account and all associated data from Settings → Data & Privacy.
• Right to Data Portability: You can download your data in machine-readable JSON format.
• Right to Withdraw Consent: You may close your account at any time.

To exercise any of these rights, use the built-in tools in your dashboard or contact us at the email below.

We use only essential cookies required for the service to function:

• Session Cookie: A secure, HTTP-only cookie that identifies your logged-in session. This cookie expires after 30 days.
• Cookie Consent: A localStorage entry that records your cookie preference.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across websites.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share data only in the following circumstances:

• When required by law, court order, or government request
• To protect our legal rights and enforce our Terms of Service
• In connection with a merger, acquisition, or sale of assets (with notice to you)

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: privacy@ioncubedecoder.net

We aim to respond to all data protection inquiries within 30 days.