Privacy Policy

Last updated: 13 October 2026

This Privacy Policy explains how the operator of VividCheats.com, trading as Vivid Cheats (“Vivid”, “we”, “us”, or “our”), collects and uses personal data when you browse the site, create an account, purchase a digital product, use support, or interact with our Discord services. For the processing described here, Vivid is the data controller.

1. Information we collect

• Account and contact data: email address, optional name, account identifiers, authentication records, and password-reset information.

• Order and transaction data: order identifier, product and licence details, price, currency, discounts, payment provider, payment status, refund or dispute status, and limited provider references. We do not store full payment-card numbers.

• Discord and support data: optional Discord username or linked Discord identifier, support messages, ticket transcripts, attachments, staff reviews, and information you choose to provide while asking for help.

• Technical and security data: IP address, browser and device information, timestamps, login and security events, error reports, service logs, and information needed to deliver, activate, secure, or troubleshoot a product.

• Usage and marketing data: pages visited, referral or campaign information, cookie identifiers, analytics events, your communications preferences, and an email address entered during checkout even if the order is not completed.

We usually obtain information directly from you. We may also receive transaction status from payment providers, authentication data from account services, Discord data when you link or use Discord support, and technical data from analytics, hosting, security, and error-monitoring providers.

2. Why we use personal data

PurposeTypical lawful basis

Process orders, deliver licence keys, manage accounts, and provide requested supportPerformance of a contract or steps requested before entering one Process payments, refunds, disputes, tax, accounting, and legal recordsContract and legal obligation Prevent fraud, abuse, unauthorised access, and threats to our servicesOur legitimate interests in protecting customers and the business, and legal obligation where applicable Diagnose errors, monitor availability, improve products, and train or review support qualityOur legitimate interests in operating and improving reliable services Send order, account, security, and service-status communicationsContract and legitimate interests Send checkout reminders and similar-product marketing where the electronic-marketing rules allow itConsent or the products-and-services soft opt-in, with an opt-out when details are collected and in every message Use non-essential cookies where consent is requiredConsent, which you may withdraw

Where information is required to create an account, process an order, verify payment, or deliver a licence, not providing it may prevent us from supplying the requested service.

3. Payments

Payments may be handled by providers such as MoneyMotion, Stripe, or NOWPayments, depending on the option available at checkout. Payment details are submitted to the selected provider under its own privacy notice. Vivid receives limited transaction details needed to confirm payment, fulfil the order, prevent fraud, and handle refunds or disputes; we do not receive or store your complete card number or card security code.

4. Automated tools and support AI

We may use automated tools to screen suspicious activity, route support requests, suggest or generate support replies, summarise tickets, and review support quality. Staff can review or take over support conversations. Our support AI does not make solely automated decisions that produce legal or similarly significant effects. Payment and security providers may separately use automated fraud checks under their own privacy notices. Do not include payment-card details, passwords, licence keys, or unrelated sensitive information in support messages.

5. Cookies, analytics, and similar technologies

We use essential cookies and local storage for functions such as authentication, security, basket or checkout state, currency choice, and referral attribution. Where configured, Google Analytics or Google Tag Manager, Sentry, VyrexCode analytics, and similar tools may collect usage, device, diagnostic, and error information. Non-essential technologies are used subject to consent where the law requires it. Browser controls may block cookies, but parts of the site may then stop working correctly.

We also run our own simple visitor statistics. Your browser stores a random identifier in local storage, and we record which steps of the site it reached (visited, viewed a product, opened checkout, went to pay), the referring website, your country (from your connection, not your exact location), and whether you used a phone or a computer. We do not store your name, email address, or IP address with these statistics, and we use them only in aggregate to understand how many people visit and buy. They are deleted after about 13 months. You can clear the identifier at any time by clearing your browser's site data.

Your browser also remembers, on your device only, the products you recently viewed and the currency you chose. To show prices in your currency we use your country (from your connection) to suggest one; converted prices are estimates and you are always charged in the store currency.

Email list. If you sign up in the footer or tick “Email me deals & restock alerts” at checkout, we store your email address, where you signed up, and the date, and may email you about deals, restocks, and new products. This is based on your consent. You can withdraw it at any time by asking us through our Support page or Discord, or through the unsubscribe link in any marketing email, and we will remove you from the list.

6. Who receives personal data

We share only what is reasonably necessary with service providers that help us operate the store, including:

• hosting, database, authentication, storage, and security providers, including Vercel and Supabase;

• payment and fraud-prevention providers, including the provider selected at checkout;

• email delivery providers such as Resend;

• Discord, when you provide a Discord username, link an account, or use Discord support;

• analytics, error-monitoring, and operational providers such as Google, Sentry, and VyrexCode; and

• professional advisers, regulators, courts, law enforcement, or a buyer of the business where disclosure is reasonably necessary or legally required.

We do not sell personal data.

7. International transfers

Some providers may process data outside the United Kingdom or the country where you live. Where data-protection law requires safeguards, we rely on an adequacy regulation, approved contractual protections, or another lawful transfer mechanism. You can request more information about relevant safeguards through support.

8. How long we keep information

We keep personal data only for as long as reasonably necessary for the purpose collected. Account data is generally retained while the account remains active. Order, payment, refund, fraud-prevention, and accounting records may be kept for up to seven years after the relevant transaction where needed for legal, tax, dispute, or audit purposes. Incomplete-checkout records are retained while recovery messages remain active and are stopped when you purchase, opt out, or unsubscribe; minimal suppression information may be retained to honour the opt-out. Support conversations, attachments, operational logs, and security records are retained according to their usefulness, sensitivity, and the need to establish or defend claims, then deleted or anonymised. Backups may retain deleted information for a limited period before rotation.

9. Security

We use administrative, technical, and organisational measures designed to protect personal data, including access controls, encrypted connections, restricted administrative access, and monitoring. No internet service is completely secure. You are responsible for using a strong unique password and keeping account, order, and licence information private.

10. Your rights

Depending on the law that applies, you may have rights to access, correct, erase, restrict, or receive a portable copy of your personal data, and to withdraw consent. These rights can be limited, for example where information must be retained for legal obligations, fraud prevention, or legal claims. We may ask for information needed to verify your identity before acting on a request.

Your right to object: you may object to processing based on our legitimate interests and to direct marketing at any time. We will stop direct marketing when you object and will assess other objections as required by law.

To exercise a right, use our Support page. You also have the right to complain to the UK Information Commissioner’s Office through ico.org.uk, or to the data-protection authority where you live.

11. Children

Our store and products are not intended for children. We do not knowingly sell to or create accounts for anyone under 18. If you believe a child has provided personal data, contact support so we can investigate and take appropriate action.

12. External links and third parties

Our site may link to Discord, payment providers, game publishers, and other third-party services. Their privacy practices are their responsibility, and you should review their notices before providing information to them.

13. Changes and contact

We may update this policy as our services or legal obligations change. The latest version and effective date will be posted here. For privacy questions or requests, contact Vivid through our Support page. Please do not send full card details, passwords, or licence keys.

Incomplete checkout reminders

If you enter an email address and continue to checkout, we record the address, the products you selected, the total and the time, even if you do not finish paying. If you don't complete the purchase, we may send up to two reminders: about one hour and about 24 hours later. We never send a reminder after you have bought, and we never send one about a checkout older than three days.

These messages only concern that checkout. Every message includes a one-click unsubscribe link; once you unsubscribe we keep only your email address on a do-not-email list so we can respect that choice. Checkout records are used to measure how many checkouts are completed and are deleted or anonymised when no longer needed.