Privacy Policy

This Privacy Policy explains how Monarch ("we", "us") collects, uses, and protects your information when you use our website and software.

• Account data — username, email, and a hashed password you provide at sign-up.
• License & device — the license key you redeem and a hardware identifier (HWID) used to prevent license sharing.
• Session data — IP address and user-agent for active sessions, used for security alerts and session management.
• Payment data — handled entirely by our payment processor; we never store full card numbers.

• To authenticate your account and software sessions.
• To enforce license terms (HWID lock, expiration, revocation).
• To detect abuse, fraud, and security incidents.
• To respond to support requests you initiate.

• We do not sell your personal data.
• We do not share your data with advertisers.
• We do not collect telemetry from in-game gameplay beyond what is required for license validation.

Account and license data is retained for as long as your account is active. Session records are kept for up to 90 days for security review and then automatically purged. You may request deletion of your account at any time by contacting support.

Passwords are hashed with bcrypt. All API traffic is served over TLS. Mod-session tokens are time-limited and HWID-bound. No security system is perfect — we recommend using a unique, strong password and enabling whatever two-factor mechanism you have available on your email.

We use a single first-party session cookie (or equivalent token in local storage) to keep you signed in. We do not use third-party advertising or tracking cookies.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal data we hold about you. To exercise any of these rights, email support@getmonarch.net.

We may update this Privacy Policy occasionally. The "Last updated" date at the top of this page reflects the most recent revision.

Questions or concerns? Email support@getmonarch.net.