Privacy Policy
Effective Date: January 1, 2026 • Compliant with GDPR Standards
1. Information We Collect
When you use ExtreamLeech, we collect minimal operational information required to provide link unrestrictor services:
- Account Details: Display name, email address, and encrypted bcrypt password hashes.
- Technical Telemetry: One-way SHA-256 hashed IP addresses (used strictly for daily guest quota enforcement), browser user-agent, and response latency.
- Transaction Records: Payment gateway transaction IDs, currency, and invoice amounts. We never store or see credit card numbers or banking secrets.
2. How We Use Collected Data
Your information is used strictly to:
- Authenticate user logins and Developer API sessions.
- Calculate daily download limits and prevent automated quota abuse.
- Deliver automated email receipts and password reset tokens.
- Diagnose upstream provider latency and server performance bottlenecks.
3. Zero-Retention of User File Contents
We do not inspect, log, or permanently store the actual file payloads you download. Link tokens are ephemeral and expire automatically after 30 to 60 minutes.
4. Cookies & Local Storage
We use essential HTTP cookies strictly for session authentication and CSRF security validation. We do not employ invasive third-party ad trackers, tracking pixels, or cross-site data aggregators.
5. Contacting Our Data Protection Officer
If you wish to export your account data or exercise your right to erasure ("Right to be Forgotten" under GDPR), please contact our team via the Help Desk or by emailing [email protected].