Privacy Policy

To operate a digital marketplace and license activation service, AimJunkies collects only what is required to deliver, secure, and support your purchases:

Your data is used strictly for operating the marketplace:

• Delivering license keys and verifying hardware ID (HWID) locks.
• Processing payments, refunds, and seller payouts.
• Detecting chargeback abuse, duplicate accounts, and automated bot activity.
• Responding to support tickets and dispute claims.
• Sending transactional emails (order confirmations, security alerts) and, if you opt in, product updates.

We do not use your data to build advertising profiles or sell it to data brokers.

We use essential session cookies and local storage to keep you signed in and remember your cart and theme preference. We do not run third-party advertising or behavioral tracking pixels.

For a full breakdown of every cookie we set, its purpose, and how to manage them, see our dedicated Cookie Policy.

We share data only with the parties needed to run the service:

• Payment processors (card and crypto gateways) to complete transactions — we never store full card numbers.
• Sellers, limited to order details needed to fulfill and support your purchase.
• Infrastructure providers (hosting, email delivery, fraud detection) under data-processing agreements.
• Law enforcement, only when compelled by valid legal process.

Sellers, developers and community owners can connect their Discord servers to AimJunkies. Our bot then verifies new members, gives roles that match purchases, and runs support tickets in Discord. When you link Discord to your account, or verify in a server that uses AimJunkies verification, we collect:

Who sees it. A server’s staff see whether you verified, at what level and how, any flags such as a possible second account, your approximate location (city and country), your device type, part of your IP address (for example 203.0.x.x), and whether you have verified with AimJunkies before (how many times, in how many servers and since when, without naming them) or whether your address was used by other accounts (a count, never who). Servers on a paid AimJunkies plan also see your full IP address and whether it is a VPN, so they can spot duplicate accounts and ban evasion. When a server does, the verify page tells you before you continue, and you can stop there without verifying. That server’s owner and staff are responsible for how they use it, and our Terms allow them to use it only to protect their server — never to share, publish or sell it, or to locate, track or harm anyone. AimJunkies staff can see full network and device data to investigate abuse; that access is limited by permission and every action is logged. Role changes, joins and messages pass through Discord, where Discord’s own privacy policy applies.

Your controls. In Account › Discord you can disconnect Discord (roles that depended on your account are removed), and withdraw any organization’s permission to add you — withdrawing the last one also ends the authorization at Discord. If an organization moves its members to a new server after losing one, it can only add you if you allowed it; you are told why and can leave with one press. AimJunkies may block an account from verifying in every connected server when it is used for fraud or abuse.

Account and order records are retained for as long as your account is active, plus the period required for tax, fraud-prevention, and legal record-keeping (typically up to 7 years for financial records). Sensitive fields — license keys, API secrets, and payment tokens — are encrypted at rest and in transit.

You may request early deletion of non-financial data at any time; see Section 7. Discord data has its own periods, in Section 5.

Depending on where you live, you may have rights under frameworks such as the GDPR (EEA/UK) or CCPA (California) to access, correct, export, or delete your personal data, and to object to certain processing.

• Request a copy of the data we hold about you.
• Correct inaccurate account details.
• Request deletion of your account and associated data, subject to legal retention requirements.
• Withdraw consent for optional marketing emails at any time.

To exercise any of these rights, email [email protected] or open a ticket in Support. We respond to verified requests within 30 days.

AimJunkies operates globally, and your data may be processed in countries outside your own. Where we transfer personal data out of the EEA/UK, we rely on Standard Contractual Clauses or equivalent safeguards with our infrastructure providers.

AimJunkies is not directed at, and does not knowingly collect data from, anyone under 16. If we learn an account belongs to someone under this age, we will disable it and delete the associated data.

Our desktop launcher protects our software by watching for tampering while it runs — for example a debugger attached to the launcher, or a known reverse-engineering tool running alongside it. During normal use nothing is captured or sent.

If, and only if, the launcher confirms a tampering attempt, and you have agreed to anti-tamper evidence collection, the launcher records a single incident containing:

• a single screenshot of your primary screen taken at the moment of the confirmed attempt;
• the AimJunkies account the launcher is signed in to (resolved from your licence and device by our server, not sent by the launcher);
• your device identifier (HWID), in hashed form;
• your IP address, from which we derive an approximate country and city;
• the type of tampering detected and the launcher version.

Why we collect it. To detect, investigate and prevent abuse, fraud, and attempts to break or redistribute our software — a legitimate interest in protecting our service and our customers.

Who can see it. The screenshot is stored encrypted and is accessible only to authorised AimJunkies security staff, through a permission-controlled admin tool. Every time a staff member views a screenshot, that view is logged. The screenshot is never posted to Discord, email, or any other channel; staff receive only a link to the secured admin page.

How long we keep it. Tamper screenshots are deleted automatically 30 days after capture.

Your choice. Agreeing to anti-tamper evidence collection is a condition of running protected products in the launcher. If you do not agree, the launcher will not run protected products; the rest of your account and the website are unaffected.

We may update this Privacy Policy as our practices evolve. Material changes will be announced via email or an in-app notice at least 14 days before taking effect. The “Effective” date at the top of this page always reflects the current version.

Questions about this policy or a data request should go to our Data Protection contact: