Privacy Policy

Last Updated: 2026/6/20

This Privacy Policy explains how Erebus ("we," "us," "our") collects, uses, discloses, and protects information when you visit or make a purchase through erebus.wtf (the "Site"). By using the Site, you agree to the collection and use of information as described here.

1. Information We Collect

Information you provide directly

• Account details: email address, username, password (stored hashed, never in plain text)
• Order information: products purchased, billing details, order/invoice history
• Support communications: messages submitted through our ticket system or Discord server
• Affiliate program details: payout method, promo codes, referral data (if you join the affiliate program)

Information collected automatically

• Device/usage data: IP address, browser type, operating system, pages visited, referring URL, timestamps
• Cookies and similar technologies (see Section 5)

Information from third parties

• Payment confirmation data from our payment processor(s) (e.g., transaction ID, payment status, last 4 card digits). We never receive or store full card numbers.
• Information you share with us if you contact support via Discord, which is also subject to Discord's own privacy policy.

2. How We Use Information

• Process orders and deliver purchased products (e.g., license key delivery by email)
• Maintain your account, order history, and customer balance
• Provide customer support and respond to tickets
• Operate and pay out the affiliate program
• Detect and prevent fraud, abuse, and unauthorized chargebacks
• Send transactional emails (order confirmations, delivery, status/maintenance updates)
• Send marketing emails where you've opted in (you can unsubscribe anytime)
• Maintain and improve the Site

3. Legal Bases for Processing

Erebus is based in the United Kingdom, and we process personal data in accordance with the UK GDPR and Data Protection Act 2018. We rely on the following legal bases: performance of a contract (fulfilling your order), legitimate interests (fraud prevention, security, operating the affiliate program), consent (marketing emails, certain cookies), and legal obligation (tax/accounting records). If you're located outside the UK, your data may also be subject to your local data protection laws.

4. How We Share Information

We do not sell your personal information. We share it only with:

• Payment processor(s) used to handle transactions
• Discord, where support is provided through our server
• Service providers that help operate the Site (hosting, analytics, email delivery)
• Law enforcement or regulators, where legally required
• A successor entity in the event of a merger, acquisition, or asset sale

5. Cookies

We use cookies and similar technologies to keep you logged in, remember your cart, and understand how the Site is used. You can disable cookies in your browser, though some Site features may not work correctly without them.

6. Data Retention

We retain personal data only as long as necessary to provide the Service, meet legal/tax obligations, resolve disputes, and enforce our agreements — generally for [X] years after your last account activity, unless you request earlier deletion.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Receive a portable copy of your data
• Withdraw consent at any time (where processing relies on consent)

To exercise these rights, contact us at [support email]. California residents may have additional rights under the CCPA, including the right to know and delete personal information.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

9. International Data Transfers

Although Erebus is based in the UK, our hosting provider and payment processor are located in the United States, so your data is transferred to and processed there in the course of running the Site and handling payments. Where required, we use appropriate safeguards (such as the UK's International Data Transfer Addendum or standard contractual clauses) to ensure these transfers meet UK data protection standards.

10. Children's Privacy

The Site is not directed to individuals under [13/16/18]. We do not knowingly collect data from children. If you believe a child has provided us personal information, contact us so we can remove it.

11. Third-Party Links

The Site may link to third-party services (including Discord and payment processors). We're not responsible for their privacy practices — please review their own policies.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with a revised "Last Updated" date.