Privacy Policy
Last updated: August 17, 2026
1 Introduction
This Privacy Policy explains how Spitari collects, uses, and protects your personal information when you use our software and services. By downloading, activating, or using Spitari, you agree to the practices described in this policy. We take your privacy seriously and are committed to being transparent about what we collect and why.
2 Information We Collect
We collect information you provide directly, and information collected automatically when the Spitari client runs and authenticates.
License & Account
- License key and authentication tokens (securely hashed and encrypted)
- Hardware ID fingerprint (HWID), derived locally from your machine to bind your license
- Discord user ID and username, when you link your account via our Discord bot
- Payment information — processed entirely through third-party providers (Sellix). We do not store card numbers or billing details.
Activation & Device Telemetry
- IP address at the time of activation and heartbeat
- Operating system version, computer name, CPU model, GPU model, and total RAM
- Spitari client version
- Activation timestamps, session durations, and fail reason codes for rejected attempts
3 How We Use Your Information
The data we collect is used strictly to operate and protect the Spitari service:
- To authenticate your license and bind it to your device
- To detect and block unauthorized use, HWID spoofing, and tier-bypass attempts
- To manage license expiry, renewals, and HWID resets via our Discord bot
- To maintain security event logs (tamper detection, replay attacks, rate-limit violations)
- To push client updates and perform version verification
- To respond to support requests submitted through Discord
We do not use your information for advertising, profiling, or sale to any third party.
4 Data Security
Spitari implements multi-layered encryption, cryptographic verification, and strict integrity controls across all communication channels and server infrastructure to protect your information and prevent unauthorized access, tampering, or manipulation.
No method of transmission over the internet or electronic storage is 100% secure, but we continuously maintain industry-standard security safeguards to protect your data and secure the network against threats.
5 Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:
- Infrastructure providers: Hosting and database providers that process data on our behalf under confidentiality obligations
- Payment processors: Sellix and any third-party checkout providers, solely for transaction processing
- Legal compliance: If required by applicable law, court order, or to protect our rights, property, or the safety of our users
- Business transfer: In the event of a merger, acquisition, or asset sale, under equivalent privacy protections
6 Data Retention
We retain authentication history, security event logs, and license records for as long as necessary to provide the service and investigate abuse. License data is retained for the duration of your subscription and a reasonable period after expiry for dispute resolution. If you request deletion, we will remove personally identifiable fields within a reasonable timeframe, except where retention is required by law.
7 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal data
- Restriction: Request that we limit how we process your data
To exercise any of these rights, contact us through our Discord server.
8 Cookies & Tracking
Our website (spitari.win) may use essential session cookies for authentication on the user dashboard. We do not use third-party tracking cookies, ad networks, or analytics platforms that profile your browsing behavior. No data is sold to advertisers.
9 Third-Party Services
Our services interact with third parties including:
- Discord: For bot-based key management, HWID resets, and support. Discord's own privacy policy governs your Discord account data.
- Sellix / Payment Processors: For handling transactions. Their privacy policies govern payment data.
- Cloudflare: For DDoS protection and CDN. Cloudflare may process connection metadata per their privacy policy.
We are not responsible for the data practices of these third-party services.
10 Children's Privacy
Spitari is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.
11 International Data Transfers
Our servers are operated in the United States. If you are accessing Spitari from outside the US, your data may be transferred to and processed in the US or other countries. By using Spitari, you consent to this transfer. We apply appropriate safeguards to protect your data regardless of where it is processed.
12 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced in our Discord server. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of Spitari after a policy update constitutes acceptance of the revised terms.
Questions or Concerns?
Reach us through our Discord server or at spitari.win. We respond to privacy inquiries as quickly as possible.
