Privacy Policy

1. Who is responsible for your information

This website is operated by Iqbal R. under the name ib4ngz in Indonesia. For the personal information described in this policy, ib4ngz acts as the data controller unless a payment provider or other third party explains that it acts independently for its own services.

2. Information we collect

Depending on how you use the website, we may collect:

• Account information: your name, email address, securely hashed password, account role, and account timestamps.
• Order information: products purchased, amount, currency, order status, payment provider, transaction references, and fulfillment timestamps. We do not store full payment-card details.
• License and delivery information: license status, expiration, device allowance, activation history, optional device name, and download eligibility.
• Device identifier: a licensed application may send a random installation identifier. We transform it with a keyed hash before storage rather than storing the original identifier.
• Communications: information you include when you contact us for support, a refund, or another inquiry.
• Technical and security information: IP address, request metadata, browser or device information, security events, and anti-abuse verification results when needed to operate and protect the website.

3. How we use information

We use information to:

• create and secure customer accounts;
• process orders and confirm payment notifications;
• deliver downloads and issue, activate, validate, or deactivate licenses;
• provide support and respond to refund or account requests;
• detect fraud, abuse, and unauthorized access;
• maintain, troubleshoot, and improve the website and products; and
• comply with accounting, tax, legal, and payment-provider obligations.

4. Legal bases

Where applicable law requires a legal basis, we process information as necessary to perform a contract with you, comply with legal obligations, protect our legitimate interests in operating and securing the service, and establish or defend legal claims. When processing requires consent, you may withdraw that consent, without affecting earlier lawful processing.

5. Cookies and local storage

The website uses an essential, signed session cookie to keep you logged in. It is configured as HttpOnly and SameSite=Lax, and as Secure in production. Your theme preference may be stored in your browser's local storage. Security tools such as Cloudflare Turnstile may process browser and network signals to distinguish legitimate users from abuse. We do not use these technologies to sell personal information.

6. When information is shared

We share only the information reasonably needed for providers to perform services on our behalf or meet their own legal obligations. Categories of recipients may include:

• hosting, database, infrastructure, and security providers;
• the payment provider identified at checkout, such as DOKU, Lemon Squeezy, or a successor provider;
• professional advisers when reasonably necessary; and
• public authorities or other parties when required by law or necessary to protect rights, safety, and service integrity.

We do not sell or rent your personal information. Each independent payment provider handles payment data under its own privacy policy.

7. International processing

Some providers may process information outside your country. Where required, we rely on appropriate contractual or legal safeguards. By using an international payment provider, your information may also be processed in the locations described in that provider's policy.

8. How long information is retained

Account information is generally retained while the account remains active. Order, license, and transaction records may be retained for as long as needed to deliver the product, support the license, resolve disputes, prevent fraud, and meet tax, accounting, or legal requirements. Support communications and security records are retained only for a reasonable operational or legal period. Information is deleted or anonymized when it is no longer needed, unless retention is required by law.

9. Security

We use reasonable technical and organizational safeguards, including password hashing, signed sessions, restricted administrative access, webhook signature verification, rate controls, and transformed device identifiers. No online system is completely secure, so absolute security cannot be guaranteed.

10. Your privacy rights

Depending on your location, you may have the right to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to your local data protection authority. We may need to verify your identity before acting on a request, and some records may be retained where legally required.

11. Children's privacy

The website and products are not directed to children under 13, and we do not knowingly collect their personal information. Purchases must be made by an adult or with the involvement of a parent or legal guardian. Contact us if you believe a child has provided information improperly.

12. External websites

Portfolio and product pages may link to external websites. Their privacy practices are controlled by their operators, and this policy does not cover information you provide directly to them.

13. Changes to this policy

We may update this policy as the website, products, providers, or legal requirements change. The latest revision date appears at the top. We will provide additional notice when a material change requires it.

14. Contact

To ask a privacy question or exercise a privacy right, use the contact details in the Contact section. Please do not send passwords, complete payment-card numbers, or license secrets.