Privacy Policy

The data controller for Lockify is Matyáš Müller (Company ID: 14333066), Czech Republic.

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us at support@lockify.gg.

We may collect and process the following categories of personal data:

• Account information, including your name, email address, and user ID.
• Connected account identifiers, such as your Steam ID, Discord ID, or Google account ID.
• Training activity, creator content, workspaces, and community interactions.
• Subscription and billing status.
• Notification and communication preferences.
• Device, browser, IP address, and technical usage information.
• Security, authentication, and audit logs.

We collect this information directly from you when you create an account or use Lockify, automatically through your use of the service, and from third-party authentication providers when you choose to connect your account.

We use your personal data only where we have a valid legal basis to do so.

We process your personal data to:

• provide, maintain, improve, and secure Lockify;
• authenticate users and manage accounts;
• provide creator and community features;
• process subscriptions and payments;
• communicate important service updates;
• comply with legal obligations;
• prevent fraud, abuse, unauthorized access, and other security incidents.

Our legal bases for processing under the GDPR include:

• Article 6(1)(b) - performance of a contract;
• Article 6(1)(c) - compliance with legal obligations;
• Article 6(1)(f) - legitimate interests, including security, fraud prevention, and service improvement.

Lockify uses essential cookies and local storage required for authentication, security, and core application functionality.

We do not currently use marketing or advertising cookies.

To provide our services, we rely on trusted third-party providers.

We currently use the following third-party services:

• Steam, Discord, and Google for authentication.
• Stripe for payment processing.

When using these services, we receive only the information necessary to authenticate your account or provide the requested functionality.

Lockify never stores your complete payment card details. Payment information is processed securely by Stripe in accordance with its own privacy and security practices.

We do not sell your personal data.

We may share your information only when necessary to:

• operate and maintain Lockify;
• provide requested services;
• comply with legal obligations;
• protect the rights, property, or security of Lockify, our users, or others.

If you choose to publish workspaces or community content, that content may be visible to other users according to your sharing settings.

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where required, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses or other GDPR-approved transfer mechanisms.

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention periods typically include:

• Audit and security logs: up to 1 year.
• Accounting and tax records: up to 10 years, where required by law.

If you delete your account, we will delete or anonymize your personal data unless we are legally required or otherwise permitted to retain certain information.

You may delete your Lockify account at any time through your account settings.

Deleting your account removes or anonymizes your personal data where possible. However, certain information may be retained where required by law or where necessary for security, fraud prevention, or the establishment, exercise, or defense of legal claims.

If you have published community content, that content may remain available to other users even after your account is deleted, unless it is removed from the platform.

We implement appropriate technical and organizational measures designed to protect personal data, including encrypted communications, restricted access controls, and security monitoring.

While no method of transmission or storage can be guaranteed to be completely secure, we continuously review and improve our security practices.

If you are located in the European Economic Area or where applicable law provides similar rights, you may request:

• access to your personal data;
• correction of inaccurate information;
• deletion of your personal data;
• restriction of processing;
• data portability;
• objection to processing based on legitimate interests;
• withdrawal of consent where processing is based on consent.

To submit a request, contact support@lockify.gg from the email address associated with your account.

We may request reasonable proof of identity before processing your request.

We normally respond within one month, although this period may be extended where permitted by law for complex requests.

Certain information may be retained where required by law or where necessary to establish, exercise, or defend legal claims.

You also have the right to lodge a complaint with the data protection authority in your country of residence.

If you have any questions about this Privacy Policy, please contact us at support@lockify.gg.

We may update this Privacy Policy from time to time.

If we make material changes, we will notify users through the website or within the application where appropriate.

The "Last updated" date at the top of this Privacy Policy always indicates the latest version.