Privacy Policy

Who we are

pwfchecker.com and the PWF Checker application for Windows are operated by PWF Checker ("we", "us").

For anything in this policy write to support@pwfauth.com or message us on Telegram.

What we collect

We only hold what the site needs to do its job. In detail:

Your account

When you register we store your name, username, email address and a hash of your password (never the password itself). If you give them, we also store your country and your Telegram or PWF Platform username so support can reach you. Your plan, its expiry date, your licence key and the time of your last login are recorded with the account.

Orders

An order records the plan, the amount in euros, the coin and network you paid with, the transaction hash you gave us, its status and any note added while it was reviewed. We never see or store card numbers or bank details — payments are cryptocurrency transfers, or are arranged with support on Telegram.

Messages

The contact form stores the name, email address, subject and message you send. The live support chat available in your profile stores the messages exchanged with our staff, together with your account.

Visits

To know how many people use the site and on which devices, each visit is counted once. We store a one-way, salted hash built from your IP address and browser identification — it cannot be turned back into either — plus the operating system, the device type (desktop, mobile, tablet), the first page opened and the number of pages viewed. Your IP address itself is not stored by us. Our hosting provider keeps the usual short-lived server logs (IP address, time, requested page) to run and secure the server.

Why, and on what basis

• To provide the service you asked for — your account, licence keys, orders and support (performance of a contract).
• To keep the site and the accounts safe — sign-in throttling, session handling, abuse prevention and the pseudonymous visit counter (our legitimate interest in running a secure service).
• To measure our advertising — only with your consent where the law requires it (see Advertising measurement).
• To meet legal obligations — bookkeeping records of paid orders.

We do not sell personal data and we do not use it for automated decisions with legal effect on you.

Cookies and local storage

Essential cookies are always on — the site does not work without them. Everything else is optional.

You can change your cookie choice at any time with Cookie settings in the footer, and delete or block cookies in your browser — the site keeps working, you may just have to sign in and pick your language again.

Advertising measurement

We advertise the app on Google. To learn which ads work, every page carries the Google Ads tag (gtag.js, Google Ireland Ltd. for visitors in Europe, Google LLC elsewhere). What it may do depends on where you are and on what you told us:

• European Economic Area, United Kingdom and Switzerland: advertising cookies and personalised measurement stay off until you choose "Accept all" in the cookie notice. Until then the tag sends Google only cookieless, aggregated signals (Google Consent Mode). "Only essential" keeps it that way.
• Everywhere else: the tag runs with its standard settings; you can still switch it off with Cookie settings in the footer.

Google's handling of this data is described in Google's advertising policy; you can also opt out of personalised ads at adssettings.google.com.

Who else sees data

• Our hosting provider runs the server the site and its database live on and processes data on our behalf under a data-processing agreement.
• Google — the advertising tag described above and the YouTube player, each only as far as your consent and your actions allow.
• Telegram — if you contact us there, the conversation is held on Telegram under Telegram's own privacy policy.
• Public blockchains — a cryptocurrency transaction is public by nature; we store the transaction hash you give us to match it to your order.
• Authorities — only where the law obliges us to.

Nobody else. We do not sell, rent or trade personal data.

The desktop app

PWF Checker runs on your own Windows PC. The phone-number lists you check, the results and the exports stay on your computer; they are not uploaded to us. The app connects to WhatsApp through the WhatsApp accounts you link to it, under WhatsApp's terms.

To work, the app contacts our licensing service: it sends your licence key, a device identifier and the app version to confirm the licence is valid and to check for updates. No lists, contacts or results are part of that exchange.

How long we keep it

• Account — for as long as it exists. Ask us to delete it and it is removed within 30 days; paid-order records stay for as long as bookkeeping law requires, without the account.
• Contact-form messages — 12 months after the last reply.
• Support chat — with the account, and deleted with it.
• Visit statistics — 24 months, pseudonymous from the first day.
• Server logs — the short retention set by our hosting provider, typically days to a few weeks.

Your rights

Wherever you are, you can ask what we hold about you, have it corrected or deleted, receive a copy of the data you gave us, object to processing based on our legitimate interest, and withdraw a consent at any time (cookies: Cookie settings in the footer). Write to support@pwfauth.com from the email address on your account; we answer within a month.

If you live in the European Economic Area or the United Kingdom, the GDPR / UK GDPR gives you these rights by law, and you may also complain to the data-protection authority of your country.

Security

The site is served over HTTPS only. Passwords are stored as bcrypt hashes, sign-in and reset tokens as hashes, and the visit counter as a salted hash. Sign-in and form submissions are rate-limited; access to the database is limited to the staff who need it. No system is perfectly secure — if you believe your account has been misused, tell us right away.

Children

PWF Checker is a professional tool. The site and the app are not directed to anyone under 16, and we do not knowingly collect their data; if you think a child has registered, let us know and we will delete the account.

Changes and contact

When the site or the app changes what it collects, this page changes with it and the date at the top moves. Material changes are also announced on the site. Questions, requests, complaints: support@pwfauth.com.