Privacy

Where your credentials live

Hosted plans. Your accounts run on a machine we operate, so those same credentials are stored on it. They have to be, because something has to log in to the game as you. We do not transmit them elsewhere and we do not use them for anything other than running your accounts, but we are holding them, and staff with access to that machine could read them. Use a game login you use nowhere else.

What we do receive

• Licence validation. Apex checks your licence key against our server. That request carries the key and a machine identifier, and nothing about your game accounts.
• Billing. Handled by our payment processor. We receive a subscription status and an email address; we never see or store your card details.
• Support. Whatever you choose to send us. Redact anything you would not want us to hold.

This website

No advertising trackers, no third-party analytics, no cookie banner — because we set no cookies. Standard server request logs may be retained by our host for operational purposes. The one exception is the sign-up page, described next.

Creating a login

When you create a login we store the username you choose, the email address you give, and a one-way hash of your password, never the password itself. We do not verify the email address and nothing depends on it being real; we use it to reach you about your login. We also record the network address your sign-up request came from, to limit abuse. The sign-up form loads Cloudflare Turnstile, a bot check: Cloudflare receives your browser details and address to run it, and that script is loaded only on the sign-up page. If you choose "Continue with Google" instead, Google tells us your email address, which Google has verified, and a stable Google account id; we receive no password and no other Google data, and Google loads its own sign-in script on the portal's sign-in page. You can ask us to delete your login at apex@axtropy.com.

The client portal

Operators using the client portal store their customers' whitelisted settings on our infrastructure so those customers can edit them. Game credentials are never part of that — the portal edits settings only, and the operator remains the data controller for their own customers.

Your data

Email apex@axtropy.com to request a copy or deletion of anything we hold. Deleting your account removes your licence records, and on the hosted option it removes the account credentials and settings held on our machines.