Privacy Policy

What we collect

• Account: username and password. The password is stored as a one-way hash (PBKDF2); nobody can read it, not even us.
• Receiver information: model, image and version, Python version and CPU, EnigmaPlay version — to show plugins compatible with your box.
• Receiver id: a SHA-256 fingerprint of the MAC address — the MAC itself never leaves your box. Used to allow one account per receiver and for “forgot password”.
• Receiver key: a secret stored on the receiver; we keep only its hash. It proves a password reset comes from your receiver.
• Installed plugins: the plugin list of receivers linked to your account (for restore and install-from-phone), and your saved backups.
• Install statistics: an anonymous random box number + plugin name + time, to count downloads. Not linked to your account.
• Ratings you give and your profile picture if you upload one.
• Crash reports: when a plugin crashes we send the error text with model, image and Python version, so the developer can fix it.
• Country: derived from the connection (Cloudflare), stored as a country code only.
• IP address: used briefly against abuse: deleted within 15 minutes (sign-in attempts) and 24 hours (account creation).

Why we use it

• Running the store: sign-in, install and update, restore, install from the phone.
• Protecting the service: preventing fake accounts and repeated attempts.
• Improving the store: download counts and crash fixing.
• Sending store messages (announcements) to receivers.

Where it is stored and who can access it

• Data is stored on Cloudflare servers; public store files on GitHub.
• Only the store administrator can access it. Developers see statistics and crash reports of their own plugins only, without personal data.
• We do not share your data with anyone unless required by law.

Retention

• Account data: until you delete your account. Sessions end when you sign out or after one year of inactivity.
• IP address: 15 minutes to 24 hours as described above.
• Anonymous install statistics and crash reports are kept for statistics and fixing and are not linked to your account.

Deleting your account and data

• You can delete your account yourself at any time: open the store on your phone or browser → your profile picture → “Delete my account”. The account is permanently deleted with its sessions, receiver links, backups, ratings, profile picture and submissions.
• On the receiver: signing out removes the session from the box; removing the plugin removes its local data.

Children

The store is not directed to children under 13 and we do not knowingly collect their data.

Changes

We may update this policy and will announce important changes through store messages on the receiver. The last update date is shown at the top.

Contact

For questions write to support@enigmaplay.org. We will never ask for your password in any message.