1. Who we are
HwidSpoofer, trading as HwidSpoofer, is the data controller for the personal data described in this notice. Our registered office is 653 Washington Street, Corpus Christi, Texas 78405, United States.
This notice covers the hwidspoofer.com website, the customer dashboard, the HwidSpoofer software in all editions, our support channels and our Discord server. For privacy questions, email legal@hwidspoofer.com.
2. Summary
- We collect the account details you give us, your purchase records, and detailed technical information about the computers you run the software on.
- That technical information includes hardware serial numbers and, in some cases, a screenshot of your machine. These are device identifiers and can be linked to you, so we treat them as personal data.
- We use it to run your license, to enforce one license per machine, and to detect fraud and key sharing.
- We do not sell your personal data, and we do not use it for advertising.
- You can ask us for a copy of your data, or ask us to delete it, at any time.
3. What we collect
Account information
Your username, email address, display name and a hashed password. If you register or get support through Discord, we also process your Discord user ID and username.
Purchase information
The amount, currency, date, product purchased, the email address used at checkout, and a reference from the payment processor. Card and wallet details go directly to the payment processor. We never receive or store your full card number.
Hardware and system information
Each time you sign in through the software, it reports a snapshot of the machine so we can bind your license to it and detect sharing. This is the most sensitive category we handle and it includes:
| Category | Examples |
|---|---|
| Component identifiers | Model names and serial numbers for disks, motherboards, processors and memory modules |
| Firmware | SMBIOS table entries and UEFI variables, and their versions and hashes |
| Operating system | Windows edition and build number, the computer name, and the Windows account name |
| Configuration | System language and region, and whether Secure Boot, hibernation, fast boot and virtualization features are enabled |
| Session | Software version, license used, timestamps, and the seed applied to the run |
The Windows account name and the computer name often contain a real name. Hardware serial numbers are persistent identifiers unique to your machine.
Screenshots
In some circumstances the software captures a screenshot of your desktop and uploads it to us. We use these only to investigate suspected fraud, license sharing or abuse, and to confirm that a reported fault is genuine.
A screenshot can capture whatever is on your screen at that moment, including other applications and personal content. Close anything private before running the software. Screenshots are stored on our content delivery storage, are accessible only to our staff, and are deleted with the login record they belong to.
Discord information
If Discord is running while you use the software, it may report the Discord account identifier exposed by Discord's Rich Presence interface, which we use to link activity to an account and to detect sharing. When you open a support ticket on our Discord server, we receive your Discord profile and the contents of the ticket.
Network and usage information
Your IP address, the country our content delivery network derives from it, your browser user agent, the pages you visit, and the requests your software makes to our interfaces. We also keep server logs and error reports for security and debugging.
4. Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account, delivering licenses and running the software | Performance of a contract |
| Binding a license to a machine and enforcing one license per computer | Performance of a contract |
| Detecting and investigating fraud, key sharing, chargeback abuse and attacks | Our legitimate interest in protecting the business |
| Providing support and answering your messages | Performance of a contract, and our legitimate interest in helping customers |
| Keeping the Services secure, debugging faults and monitoring reliability | Our legitimate interest in a secure, working service |
| Website analytics | Your consent |
| Keeping accounting and tax records, and responding to lawful requests | Legal obligation |
We do not sell personal data, we do not share it with advertisers, and we do not make decisions producing legal effects about you by automated means alone. Automated checks can flag an account for review, but a person decides before any account is suspended.
6. International transfers
Our database, file storage and backups are hosted in the European Union. Some of the providers above are based outside the European Economic Area, mainly in the United States. Where data is transferred outside the EEA, we rely on the European Commission's standard contractual clauses or an adequacy decision. You can ask us for details of the safeguards that apply.
7. How long we keep it
| Data | Retention |
|---|---|
| Account details | While your account exists, then deleted on request |
| Hardware snapshots and screenshots from sign-ins | Up to 3 years, then deleted automatically |
| Purchase and invoice records | 10 years, to meet accounting and tax obligations |
| Support conversations and tickets | Up to 3 years after the last message |
| Server logs and error reports | Up to 30 days |
| Database backups | 7 days on a rolling basis |
We may keep specific records for longer where we need them to defend a legal claim or to keep a banned account out.
8. How we protect it
Traffic is encrypted in transit. Passwords are hashed. Access to customer data is limited to staff who need it, through an authenticated administration panel. Backups are encrypted and stored separately. Payment details are handled by our payment processors and never reach our servers.
No system is perfectly secure. If a breach affects your rights, we will notify you and the competent supervisory authority as the law requires.
9. Your rights
Under the General Data Protection Regulation you can ask us to:
- Access the personal data we hold about you, and receive a copy;
- Correct data that is wrong or incomplete;
- Delete your data, where we have no overriding reason to keep it;
- Restrict or object to our processing, including processing based on legitimate interests;
- Port your data to another provider in a machine-readable format;
- Withdraw consent at any time, where we relied on consent, without affecting what we did before you withdrew it.
Some account details can be changed yourself in your dashboard settings. For anything else, email legal@hwidspoofer.com from the address on your account. We reply within one month and may ask you to confirm your identity first.
If you are unhappy with our response, you can complain to the data protection authority in the country where you live or work, such as your national authority in the European Union or the Information Commissioner's Office in the United Kingdom.
If you are a resident of California or another US state with comparable law, you have similar rights of access, deletion and correction, and a right not to be discriminated against for exercising them. We do not sell or share personal information for cross-context behavioral advertising.
11. Children
The Services are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this notice
We may update this notice. The "last updated" date at the top of the page always shows the current version, and we will give notice of significant changes through the website, the dashboard or our Discord server.
13. How to contact us
For privacy questions or to exercise your rights, email legal@hwidspoofer.com. For general support, email support@hwidspoofer.com or open a ticket on our Discord server.
HwidSpoofer
653 Washington Street
Corpus Christi, Texas 78405
United States
This document is provided for transparency and is not legal advice. If any part of it conflicts with a mandatory consumer protection right you hold in your country of residence, that right prevails.
