Privacy Policy

Welcome to PackSwap Studio ("we", "our", or "us"), accessible via packswapstudio.shop and our native desktop application. Your privacy is critically important to us. This Privacy Policy describes how we collect, store, protect, and use your information when you use PackSwap Studio.

1. Information We Collect

We believe in data minimization. We only collect the minimal information necessary to deliver software updates, license verification, and optional cloud backup features:

• Account Information: If you register or purchase a license, we collect your chosen username, email address, password hash, and optional Discord username/ID for licensing and support.
• Hardware Identifier (HWID): To prevent unauthorized redistribution and piracy of licenses, our desktop software generates a cryptographic SHA-256 hash derived from basic system hardware properties. No personal files, browsing history, or documents are ever read.
• Network & Connection Data: Our authorization server logs IP addresses and timestamps during software authentication and update checks to detect fraudulent multi-location activations and DDoS attacks.
• Server Configuration: SSH connection hostnames and server configuration paths entered in the desktop app are stored strictly locally on your machine in config.json. We do not store your VPS root passwords or private SSH keys on our servers.

2. Google Drive API & OAuth 2.0 User Data Policy

PackSwap Studio offers an optional 1-click cloud backup feature that allows users to upload Minecraft world saves directly to their own Google Drive account. When you connect your Google Drive account:

• Scopes Requested: We request only https://www.googleapis.com/auth/drive.file (access strictly to files and folders created by PackSwap Studio) and https://www.googleapis.com/auth/userinfo.email (to display your connected account email in the app interface).
• No Access to Personal Files: We never request or access your private photos, Google Docs, personal folders, or existing files in Google Drive. We only operate within the dedicated PackSwap Studio Backups folder.
• Local Token Storage: Your OAuth access and refresh tokens are stored locally on your personal computer in your configuration file. Tokens are never transmitted to, sold to, or stored on our servers.
• No Data Transfer or AI Training: We do not share, sell, or transfer your Google user data to third parties, advertising brokers, or external AI models.

3. How We Use Information

We use the collected information solely for:

• Authenticating your license and preventing software piracy.
• Distributing application updates and security patches.
• Facilitating direct backups of Minecraft world archives to your linked Google Drive.
• Providing customer support via our Discord community and email.

4. Data Storage and Security

All authentication records and password hashes are stored in encrypted databases using industry-standard password hashing (PBKDF2/SHA-256 with salts). Network communications between the desktop software and our servers utilize TLS/HTTPS and SSH encryption.

5. Data Retention & Deletion

You have the right to request the deletion of your account and licensing data at any time. When you disconnect Google Drive in the desktop software, local tokens are immediately cleared. To request full deletion of your licensing records, contact us on Discord or via our official support channels.

6. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Any modifications will be posted to this page with an updated effective date. Continued use of PackSwap Studio following any updates constitutes your acceptance of the revised policy.

7. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact us:

• Website: packswapstudio.shop
• Email: support@packswapstudio.shop