Privacy Policy

Who we are

pwfchecker.com and the PWF Checker application for Windows are operated by PWF Checker ("we", "us")

For anything in this policy write to support@pwfchecker.com or message us on Telegram

What we collect

We only hold what the site needs to do its job. In detail:

Your account

When you register we store your name, username, email address and a hash of your password (never the password itself). If you give them, we also store your country and your Telegram or PWF Platform username so support can reach you. Your plan, its expiry date, your licence key and the time of your last login are recorded with the account

Orders

An order records the plan, the amount in euros, the coin and network you paid with, the transaction hash you gave us, its status and any note added while it was reviewed. We never see or store card numbers or bank details — payments are cryptocurrency transfers, or are arranged with support on Telegram

Messages

The contact form stores the name, email address, subject and message you send. The live support chat available in your profile stores the messages exchanged with our staff, together with your account

Visits

To know how many people use the site and on which devices, each visit is counted once. We store a one-way, salted hash built from your IP address and browser identification — it cannot be turned back into either — plus the operating system, the device type (desktop, mobile, tablet), the first page opened and the number of pages viewed. Your IP address itself is not stored by us. Our hosting provider keeps the usual short-lived server logs (IP address, time, requested page) to run and secure the server

How visitors use the site

To understand which channels bring interested visitors and to follow up on enquiries, a small script on our pages records what a visitor does on pwfchecker.com: the pages opened and time spent on them, the website or ad that brought them (the referring site and, if present, the ad or campaign parameters of the first page), the site language and time zone, the operating system and device type, the country, and these actions — clicking one of our Telegram links, playing a video, reaching the pricing section, and submitting the contact, sign-up or sign-in form (never what was typed). The country is looked up on our own server from the IP address with the DB-IP database; the IP address is not stored

Each visitor gets a random identifier. Where your cookie choice allows it (you accepted all cookies, or you are outside Europe and have not been asked), it is kept in the pwf_vid cookie for a year, so a return visit and — if you are signed in — your account are linked to the same record. Otherwise the identifier lives only in your browser tab and nothing joins one visit to the next or to an account. Browsers sending Global Privacy Control are treated as "essential only"

Why, and on what basis

• To provide the service you asked for — your account, licence keys, orders and support (performance of a contract)
• To keep the site and the accounts safe — sign-in throttling, session handling, abuse prevention and the pseudonymous visit counter (our legitimate interest in running a secure service)
• To measure our advertising — only with your consent where the law requires it (see Advertising measurement)
• To meet legal obligations — bookkeeping records of paid orders

We do not sell personal data and we do not use it for automated decisions with legal effect on you

Cookies and local storage

Essential cookies are always on — the site does not work without them. Everything else is optional

You can change your cookie choice at any time with Cookie settings in the footer, and delete or block cookies in your browser — the site keeps working, you may just have to sign in and pick your language again

Advertising measurement

We advertise the app on Google. To learn which ads work, every page carries the Google Ads tag (gtag.js, Google Ireland Ltd. for visitors in Europe, Google LLC elsewhere). What it may do depends on where you are and on what you told us:

• European Economic Area, United Kingdom and Switzerland: advertising cookies and personalised measurement stay off until you choose "Accept all" in the cookie notice. Until then the tag sends Google only cookieless, aggregated signals (Google Consent Mode). "Only essential" keeps it that way
• Everywhere else: the tag runs with its standard settings; you can still switch it off with Cookie settings in the footer

Google's handling of this data is described in Google's advertising policy; you can also opt out of personalised ads at adssettings.google.com

Who else sees data

• Our hosting provider runs the server the site and its database live on and processes data on our behalf under a data-processing agreement
• Google — the advertising tag described above and the YouTube player, each only as far as your consent and your actions allow
• Telegram — if you contact us there, the conversation is held on Telegram under Telegram's own privacy policy
• Public blockchains — a cryptocurrency transaction is public by nature; we store the transaction hash you give us to match it to your order
• Authorities — only where the law obliges us to

Nobody else. We do not sell, rent or trade personal data

The desktop app

PWF Checker runs on your own Windows PC. The phone-number lists you check, the results and the exports stay on your computer; they are not uploaded to us. The app connects to WhatsApp through the WhatsApp accounts you link to it, under WhatsApp's terms

To work, the app contacts our licensing service: it sends your licence key, a device identifier and the app version to confirm the licence is valid and to check for updates. No lists, contacts or results are part of that exchange

How long we keep it

• Account — for as long as it exists. Ask us to delete it and it is removed within 30 days; paid-order records stay for as long as bookkeeping law requires, without the account
• Contact-form messages — 12 months after the last reply
• Support chat — with the account, and deleted with it
• Visit statistics — 24 months, pseudonymous from the first day
• Visitor activity (pages, source, actions) — 180 days after the last visit, then deleted automatically
• Server logs — the short retention set by our hosting provider, typically days to a few weeks

Your rights

Wherever you are, you can ask what we hold about you, have it corrected or deleted, receive a copy of the data you gave us, object to processing based on our legitimate interest, and withdraw a consent at any time (cookies: Cookie settings in the footer). Write to support@pwfchecker.com from the email address on your account; we answer within a month

If you live in the European Economic Area or the United Kingdom, the GDPR / UK GDPR gives you these rights by law, and you may also complain to the data-protection authority of your country

Security

The site is served over HTTPS only. Passwords are stored as bcrypt hashes, sign-in and reset tokens as hashes, and the visit counter as a salted hash. Sign-in and form submissions are rate-limited; access to the database is limited to the staff who need it. No system is perfectly secure — if you believe your account has been misused, tell us right away

Children

PWF Checker is a professional tool. The site and the app are not directed to anyone under 16, and we do not knowingly collect their data; if you think a child has registered, let us know and we will delete the account

Changes and contact

When the site or the app changes what it collects, this page changes with it and the date at the top moves. Material changes are also announced on the site. Questions, requests, complaints: support@pwfchecker.com