1. Scope
This policy describes data handling in the Unlit workspace (unlit.cc) and on project loader pages: accounts, licenses and project management. Third-party sites and services have their own policies.
By using the service, you agree to this policy. If you do not agree with it, stop using the service.
2. Data we process
Account data includes email address, name, protected credentials, roles and project membership. A project loader account holds a username, email address and protected password.
License and loader use may involve account and key identifiers, device binding (HWID), IP address, request time, client version and access-check results. The workspace stores uploaded files, product settings, team members and audit records.
The site processes visit information: pages, referral source, campaign, language, browser, device type and approximate region. Information you submit in an application or support request is also stored to handle that request.
We do not ask for passport details, identity documents, photos or other personal information beyond the minimum needed to run the service.
3. How we receive data
Data comes from you when signing in, purchasing, applying or managing a project; automatically when a browser or client contacts the service; from Google if you sign in with Google; and from connected payment or infrastructure providers within the relevant transaction.
4. How data is used
We use data to authenticate and secure accounts, fulfil orders, issue and validate licenses, operate projects, handle applications, prevent abuse and analyse site usage. Applicable grounds depend on the operation: performing a contract, legitimate interests in security and service operation, legal obligations, or consent where required.
5. Payments
When payments are enabled, we receive payment status and references, amounts and information needed to reconcile the order. Do not enter payment credentials in support or application fields. Where a payment method is processed by a third-party provider, that provider’s policy also applies. Cryptocurrency transactions may be visible on a public network.
6. Cookies and local storage
The service uses cookies and local storage for login sessions, request protection, language and referral attribution. Disabling these mechanisms may affect sign-in or saved preferences. You can delete site data in your browser settings; you will then need to sign in again.
7. Sharing data
We do not share personal data with third parties except where required by law, where needed to fulfil our obligations to you (for example, with payment systems and banks to process a payment), or with your consent.
Hosting, site protection and delivery providers (including Cloudflare), transactional email providers (Resend), and connected payment providers receive the data needed for their services. Project administrators see member and license data within their permissions. We do not sell personal data.
Data may be disclosed to comply with a binding lawful request or protect rights and security. Providers may process data in other countries; applicable data-protection requirements still apply.
8. Retention and security
Data is kept as needed for accounts, orders, licenses, security and required records. Account deletion does not always immediately erase order records, security logs or backups. Access is permission-controlled; encrypted connections and backups are used. No storage method can guarantee absolute security.
Transmitting data over the internet carries risks. To the extent permitted by law, we are not responsible for loss, theft or disclosure of data caused by third parties or by the user, for example when the user shares sign-in codes or keys with others.
9. Your rights
Depending on applicable law, you may request access, correction, deletion, restricted processing or a copy of your data, object to processing and withdraw consent previously given. Identity verification may be required. Some data may be retained where legally required or necessary to protect rights. You may also contact a competent data-protection authority.
10. Automated checks and minors
Automated checks support security, payment status, licensing and device binding. If you believe a result is incorrect, request a review through an available support channel. The service is not intended for persons who cannot independently enter into a contract under applicable law.
11. Updates and contact
We may change this policy without prior notice. The current version is published on this page with its update date; by continuing to use the service after changes, you accept the new version. Contact channels are listed in the site footer.