Who we are
Zolteq makes plugins and mods for Honey Select 2 Studio and is the controller for the personal data described here. For questions and requests, message us on Patreon.
Visiting zolteq.com
The site is a set of static pages served by Cloudflare. Like any host, Cloudflare handles your IP address and request details to deliver pages and protect the site against abuse. We run no analytics, no advertising, and no tracking cookies.
- Guide view counters are plain counts. Your browser remembers locally that it counted a view, so a refresh does not count twice. Nothing about you is stored.
- Guide likes use a salted, truncated hash of your IP address so a like cannot be repeated. The address itself is never stored, and the hash is deleted after 13 months. Basis: our legitimate interest in keeping the counts honest.
Downloading through our Patreon links
Paid and some free files are delivered through links that ask you to sign in with Patreon so we can check that your membership includes the file. When you do, we receive from Patreon your Patreon user id, display name, your membership status for our campaign and the tier you are entitled to. From your device we record the IP address, the country it maps to, your browser's identification string and the time.
If Patreon reports that you are not a member of our campaign, we also keep, for seven days, the ids of the campaigns Patreon did list for you. This exists only to tell a configuration mistake on our side from a genuine non-member and is used for nothing else. In that case we do not keep your display name.
For a completed download we keep which file was issued, when, to which Patreon account, the tier at the time, the country, and the identifier embedded in your copy (see the next section).
- Why: to check entitlement and deliver the file (performance of our agreement with you); to limit abuse such as excessive downloads or shared accounts, and to trace redistribution (our legitimate interest in protecting our work).
- How long: records of individual sign-in attempts are deleted after 90 days. IP addresses are removed after 90 days everywhere, leaving only the country. Records of completed downloads are kept while the file is offered and for up to three years after it is withdrawn. Records connected to a copy we disabled because it was redistributed are kept for as long as that remains necessary.
Personal copies
Every file served through our download links is prepared for the account that requested it and contains an identifier unique to that download. The identifier is random and holds no personal data; only our records connect it to an account. If a copy turns up outside Patreon, we can look up which account it was issued to.
Basis: our legitimate interest in protecting our work from redistribution. We have weighed this against your interests: the identifier reveals nothing to anyone but us, it has no effect on how the file works, and it only ever matters for a copy that has been passed on.
Licence keys and activation
Some plugins need a licence key. When you claim a key on this site we record your Patreon user id and display name, the claim code you entered and the time. When a plugin activates or re-checks its key, it sends the key, a device identifier (an anonymised value that Unity derives from your hardware), the plugin name and version. We record those with your IP address, country and the time.
- Why: to issue the key, enforce the number of machines it covers, confirm it is still valid, and revoke it if needed (performance of our agreement with you).
- How long: key and activation records for as long as the key exists. Attempt logs are deleted after 90 days and IP addresses removed after 90 days.
Plugin start-up check-in
Plugins obtained through our download links may contact our server when they start. They send the build identifier embedded in the file, a device identifier, and the plugin's name and version. We record the time, the country, and the IP address for 90 days, at most one record per device per day. This happens for any copy of such a plugin that starts, including a copy that was not obtained from us.
- Why: a copy that has been redistributed shows up as one build running on many devices. We use this to detect that and to disable redistributed copies (our legitimate interest in protecting our work).
- How long: check-in records are deleted after 12 months.
Where a device is being used to run copies issued to other people, we may bar that device from using our plugins. We then keep that device identifier, the reason, and a count of the times it has been turned away, for as long as the bar stands, because that is what the bar consists of. Write to us if you believe your device was barred in error.
When a build appears on an unusual number of devices, our server sends us a notification in a private Discord channel containing the account's display name and Patreon id, so that a person can look at it.
Who else sees your data
We use a small number of service providers, who process data only on our instructions:
- Cloudflare, Inc. hosts the website, stores the download files and the guide counters.
- Salesforce, Inc. (Heroku) runs the download and licensing server and its database, on servers in the EU.
- Patreon, Inc. provides the sign-in and tells us about your membership. Patreon is a separate controller for your Patreon account; its own privacy policy applies to what it does.
- Discord Inc. delivers the internal alert notifications described above.
IP-to-country lookups run on our own server, using a database we download from MaxMind; your address is not sent anywhere for this. Where a provider is based in the United States, we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses. We do not sell personal data and do not share it with anyone else, except where the law requires it or to establish or defend legal claims.
Cookies and local storage
The download sign-in sets one cookie for ten minutes, which is needed to complete the sign-in securely. The help pages use your browser's local storage to remember which guides you have viewed and liked. There are no analytics or advertising cookies, which is why the site shows no cookie banner.
Automated decisions
The download gate decides automatically whether your Patreon membership entitles you to a file, based only on what Patreon reports. If you think it got that wrong, write to us. Decisions to block an account or to disable a copy because of redistribution are made by a person after reviewing the records.
Your rights
You can ask for a copy of the data we hold about you, have it corrected or deleted, have its processing restricted, object to processing we base on legitimate interests, and receive the data you gave us in a portable form. Send requests by message on Patreon; we answer within one month.
We may decline to delete records we need to establish, exercise or defend legal claims, such as the record that a particular copy was issued to a particular account. If we rely on this, we will tell you.
If you believe we handle your data unlawfully, you can complain to the data protection authority in the country where you live.
Changes
When this page changes, the date at the top changes with it. The current version always applies.