ModKey (MDK) Privacy Policy

1. General Provisions

1.1. This Privacy Policy (the "Policy") explains how the ModKey (MDK) panel network (the "Network") processes personal data.

1.2. This Policy covers panel users (owners, administrators, software owners, helpers and resellers), chat participants, and end users of software connected to the Network whose license keys are checked through the Connect API. End-user data is processed on behalf of the software owner, who is responsible for informing their users.

1.3. The Network is operated by its owner. Questions and requests about personal data are accepted on Telegram at @EXPERT_CATPON.

2. Data We Process

2.1. The following data may be collected when you use the Network:

• Username, full name and account credentials, including password hashes, two-factor and passkey data, and API keys;
• Email address, if provided or used to sign in to the chat;
• Telegram ID and username, when you link Telegram or sign in with it;
• IP address, browser user agent and device information;
• License keys, the device identifiers (HWID or serial) and IP addresses sent with key checks, and the country derived from the IP address;
• Role, balance, referral and invitation data, and files you upload;
• Panel activity logs;
• Chat and message data, when chats are used.

2.2. Your data is used only to provide the Network and its features (accounts, license key checks, statistics for software owners, notifications and backups) under the Terms of Use, to keep it secure and enforce its rules, and where the law requires it. Where processing is based on your consent, you may withdraw it at any time (see 3.5). Data is not sold or used for advertising.

2.3. The Network uses only the cookies needed for sign-in, security and remembering that you accepted these documents. It uses no advertising or analytics cookies. The donation page embeds a YooMoney payment form, which may set its own cookies.

3. Protection, Retention and Your Rights

3.1. Data is protected against unauthorized access, loss, alteration or disclosure by HTTPS, hashed passwords, optional two-factor (with encrypted secrets) and passkey sign-in, role-based access, CSRF and session protection, and encrypted backups.

3.2. Access to data is limited by role, and everyone with access must keep it confidential. Software owners and the staff they appoint see the keys, devices and key-check history of their own software; IP addresses from key checks are visible only to the Network owner. In the chat, other participants see the email address you signed in with as your name.

3.3. Account data is kept while the account exists. Deleting an account removes its profile, credentials, Telegram link, account links, sessions and wallpaper. Other records are kept for the periods below:

• Sessions: 48 hours;
• Key-check audit log: about 14 days;
• Server and application logs: up to 30 days;
• Country statistics: 32 days;
• Expired license keys: deleted 3 days after expiry, except lifetime, service and disabled keys;
• Panel activity logs, key usage history, issued keys, referral codes, uploaded files, F1 area accounts, bans, chat messages and staff notifications in Telegram: no fixed period;
• Encrypted database backups, made every 12 hours: 14 days on the server; copies delivered to Telegram are not deleted automatically.

3.4. Outside the Network, data is shared only with Telegram (sign-in, account linking, channel membership checks, notifications, staff logs and delivery of encrypted backups), the hosting provider of the servers, Cloudflare where it protects the site, ipwho.is, ipinfo.io, api.country.is and GeoJS when a key is checked (only the IP address, to determine its country), YooMoney when you open the donation form, and authorities on a lawful request. Some of these providers are located outside Russia, so data may be transferred abroad.

3.5. You may request access to your data, its correction or deletion, withdraw consent, or object to processing by writing to the operator (see 1.3). Some data can be changed in your profile, where you can also unlink Telegram and end sessions. Requests are answered within 10 working days; this period may be extended by 5 working days with a reasoned notice. You may also complain to Roskomnadzor, to the data protection authority of your EU country, or to a court.

4. Changes to This Policy

4.1. The administration may change this Policy. A new version takes effect from the date shown at the top of this page; material changes are announced in advance in the panel and in the Telegram channel @mdk_space.