Privacy Policy

Privacy Policy

Learn how we collect, use, and protect your personal information

Last updated: 7/16/2026

Kaktu ("we", "us", "our") values the privacy of our users ("you", "your") and is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website https://kaktu.xyz and purchase anti-cheat software licenses from us.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy and in compliance with the General Data Protection Regulation (GDPR) and French Data Protection Law.

1. Data Controller Information

Data Controller:

  • Illan Demeese - Entrepreneur Individuel (EI)
  • Email: contact@kaktu.xyz
  • Phone: Available upon request
  • Business Address: Available upon request to contact@kaktu.xyz
  • Website: https://kaktu.xyz

2. Types of Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide Directly

  • Identity Data: First name, last name, username
  • Contact Data: Email address, postal address, telephone number
  • Financial Data: Payment card details, billing address
  • Transaction Data: Details about payments and purchases you make
  • Communication Data: Your messages to us and our responses

2.2 Data We Collect Automatically

  • Technical Data: IP address, browser type and version, device information, operating system
  • Usage Data: Pages visited, time spent on website, click-through data, date and time of access
  • Marketing Data: Your preferences in receiving marketing communications

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and legal bases under GDPR Article 6:

PurposeLegal Basis
Process your orders and deliver software licensesContract performance (Article 6(1)(b))
Send order confirmations and customer supportContract performance (Article 6(1)(b))
Process payments and prevent fraudContract performance (Article 6(1)(b)) & Legitimate interests (Article 6(1)(f))
Improve website and personalize experienceLegitimate interests (Article 6(1)(f))
Send marketing communicationsConsent (Article 6(1)(a))
Comply with legal obligations (accounting, taxes)Legal obligation (Article 6(1)(c))

4. Data Retention Periods

We retain your personal data for the following periods:

  • Customer account data: For the duration of your account + 3 years after account closure
  • Transaction and payment data: 10 years (French accounting obligations)
  • Marketing communications: Until you withdraw consent or 3 years of inactivity
  • Website analytics data: 25 months maximum
  • Customer support communications: 5 years from last interaction
  • Legal compliance data: As required by applicable law

5. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

  • SSL/TLS encryption for data transmission
  • Encrypted storage of sensitive data
  • Regular security audits and vulnerability assessments
  • Access controls and employee training
  • Secure payment processing through certified providers
  • Regular backups with encryption

While we implement strong security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but we continuously work to protect your data.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential Cookies (No consent required)

Necessary for website functionality, security, and user authentication

Analytics Cookies (Consent required)

Help us understand how visitors use our website to improve user experience

Marketing Cookies (Consent required)

Used to deliver relevant advertisements and track campaign effectiveness

You can manage your cookie preferences through your browser settings or our cookie consent banner.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of recipients:

  • Payment processors: To process payments securely (Shopify)
  • Cloud service providers: For hosting and data storage with appropriate safeguards
  • Email service providers: To send transactional and marketing communications
  • Analytics providers: To understand website usage (with pseudonymized data)
  • Legal authorities: When required by law or to protect our rights

All third parties are contractually bound to protect your data and use it only for specified purposes.

8. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure adequate protection through:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes and codes of conduct

9. Your Data Protection Rights

Under GDPR and French data protection law, you have the following rights:

Right of Access (Article 15)

Request a copy of your personal data we hold

Right to Rectification (Article 16)

Correct inaccurate or incomplete personal data

Right to Erasure (Article 17)

Request deletion of your personal data (subject to legal obligations)

Right to Restrict Processing (Article 18)

Limit how we use your personal data

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format

Right to Object (Article 21)

Object to processing based on legitimate interests or direct marketing

How to Exercise Your Rights

To exercise any of these rights, contact us at contact@kaktu.xyz with:

  • Clear identification of your request
  • Proof of identity (for security purposes)
  • Specific details about the data concerned (if applicable)

Response time: We will respond within 1 month (extendable to 3 months for complex requests).

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated:

French Supervisory Authority (CNIL):

  • Commission Nationale de l'Informatique et des Libertés
  • 3 Place de Fontenoy - TSA 80715
  • 75334 PARIS CEDEX 07
  • Phone: +33 (0)1 53 73 22 22
  • Website: https://www.cnil.fr
  • Online complaint: https://www.cnil.fr/en/plaintes

11. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or significantly affects you. Any automated processing we use is limited to basic fraud prevention measures and website optimization.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes:

  • We will post the updated policy on this page
  • We will update the "Last Updated" date
  • We will notify you via email if you have an account with us
  • For significant changes, we may seek your renewed consent

We encourage you to review this Privacy Policy periodically.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: contact@kaktu.xyz
  • Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
  • Postal Address: Available upon request
  • Response Time: We aim to respond within 48 hours for general inquiries and within 1 month for formal data protection requests

This Privacy Policy complies with the General Data Protection Regulation (GDPR), French Data Protection Act (Loi Informatique et Libertés), and other applicable data protection laws.