Legal
Privacy Policy
Effective date: October 29, 2026
This Privacy Policy explains how Reliva Network LLC, operating as CrystalPlugins ("we", "us"), collects, uses and shares personal data when you use crystalplugins.com. We are the data controller for the processing described here.
1. Data we collect
- Account data: username, email address, password (stored only as a secure hash), profile image and account settings.
- Sign-in with Google or Discord: if you choose it, the account identifier, email address, name and avatar those services share with us.
- Purchase data: products bought, amount, currency, discount codes, buyer name and email, and payment references from Stripe. We do not receive or store your full card number.
- License data: license keys (stored encrypted), the IP address and installation identifier of the server a license is bound to, and verification timestamps.
- Technical and security data: IP address, browser user agent, active sessions, and security logs used for rate limiting and fraud prevention.
- Support data: the content of support tickets and messages you send us.
- Referral data: referral codes you use or share.
2. How and why we use it
- to create and secure your account and keep you signed in (performance of contract);
- to process purchases, issue and verify licenses and deliver downloads (performance of contract);
- to send transactional emails such as password resets and purchase-related notices (performance of contract);
- to prevent fraud, license abuse and attacks, and to enforce our Terms (legitimate interests);
- to answer support requests (performance of contract and legitimate interests);
- to keep accounting and tax records (legal obligation);
- to send product announcements, only if you opt in; you can opt out at any time (consent).
3. Who we share it with
We do not sell your personal data and do not share it for cross-context behavioral advertising. We share data only with service providers that help us run the site:
- Stripe (payments, fraud prevention; for Managed Payments transactions, Stripe/Link acts as merchant of record and processes data under its own privacy policy);
- Resend (transactional email delivery);
- Cloudflare (network delivery and security);
- Google and Discord (only if you sign in with them);
- our server hosting provider.
We may also disclose data when required by law, to protect our rights or users, or in connection with a merger or sale of the business.
4. Cookies
We use only strictly necessary cookies: for signing in, keeping your session, protecting forms against CSRF and securing the admin area. We do not use advertising or analytics cookies. Because these cookies are required for the site to work, they do not require consent; you can block them in your browser, but sign-in will then not work.
5. International transfers
We are based in the United States and our service providers may process data in the United States and other countries. Where data protection law requires it, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Retention
We keep account data while your account is active. Purchase, license and tax records are kept for as long as required by law (generally up to 7 years). Security logs and session data are kept for a limited period. When you delete your account, we delete or anonymize your data except what we must keep for legal, accounting or fraud-prevention purposes.
7. Security
We protect data with measures including encrypted connections (HTTPS), password hashing, encrypted license keys, access controls and two-factor authentication for staff. No system is completely secure; please use a strong, unique password.
8. Your rights
Depending on where you live (for example under the GDPR in the EU/UK, the CCPA/CPRA in California, or KVKK in Türkiye), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your local data protection authority. California residents also have the right not to be discriminated against for exercising their rights.
To exercise these rights, email [email protected] from your account email address. We will respond within the time required by law and may need to verify your identity.
9. Children
The site is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.
10. Changes
We may update this Privacy Policy. The effective date above shows the latest version, and material changes will be announced on the site.
11. Contact
Reliva Network LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. Email: [email protected].
1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA
[email protected]