Privacy Policy.

This policy explains how Paragon Tweaks ("Paragon", "we", "us") handles personal information when you use paragontweaks.net, the Paragon Tweaking Utility ("PTU"), the Networking Utility, our services, and our Discord server. Paragon Tweaks is based in Nevada, United States. "We" includes Paragon and the contractors who deliver our services on our behalf. Questions or requests: [email protected].

When you sign in with Discord

• Discord profile: your Discord ID, username, display name and avatar. We do not receive your Discord email address.
• Discord access: the access token Discord gives us, so we can add you to our server when you open a support ticket. We also check whether you are already a member; from your server list we keep only that yes or no.
• Sign-in session: a secure sign-in cookie that keeps you logged in (30 days on the website, up to a year in PTU).

When you use PTU

• Device identifiers: your PC's system (SMBIOS) ID, processor ID, motherboard make and model, and the hardware (MAC) addresses of its network adapters. We use these only to tie your licence to one PC and recognise that PC again after hardware changes.
• Licence activity: a record of licence events (first link, sign-ins, blocked mismatches, moves to another PC) with the IP address and app or browser details of the request.
• BIOS settings files: if you use PTU's BIOS tools, the exported settings file with your motherboard and processor model, linked to your Discord ID. We use these to support boards and improve our BIOS recommendations.
• Update checks: the PTU version and channel when it checks for updates.

PTU does not send us usage analytics, telemetry or crash reports. Hardware monitoring stays on your PC, and support logs stay on your PC unless you choose to send them to us. The built-in speed test connects to Cloudflare.

When you buy something

• Through Stripe: Stripe collects your card, email and billing details; we never see or store full card numbers.
• What we keep: your Stripe customer and subscription IDs, plan, billing period, status, renewal dates, promo codes used, refunds, disputes and failed-payment messages. For some older subscriptions, Stripe records also hold the location estimated from the IP address at sign-up.

When you contact us or book a service

• Bookings: the details you enter so the technician can prepare, such as your PC parts, games, frame rates and ping, operating system, state or province and country, internet provider, connection type and speed, router and budget.
• Support tickets: what you write in tickets, ticket transcripts, and any feedback rating you leave. Tickets run in our Discord server.
• Contact emails: your name (optional), email address, subject and message. The form uses Cloudflare Turnstile to block spam, which sends Cloudflare your IP address and basic browser signals.
• Remote sessions: during a tuning session our technician connects to your PC with RustDesk and sees what is on your screen. We do not copy your personal files.

Affiliates, points and giveaways

• Affiliates: your signup answers (name, email, Discord username, channels, audience size, games, whether you use PTU and how you would share Paragon), your code, the purchases made with it, points earned and cashout requests, including the PayPal email you give us. Affiliates only see referred buyers as the first letters of their username.
• PTU points and giveaways: your points history and giveaway entries. If you win a giveaway, your Discord display name and avatar may be shown publicly as the winner.

Security

• Security logs: when a request looks suspicious, we log its IP address, browser details, the country reported by Cloudflare and the page it targeted, to stop abuse.
• Server logs: our hosting keeps standard web logs (which include IP addresses), and the ticket bot keeps its logs, including IP addresses, for 30 days.

• To sign you in, run your account and show your subscription.
• To provide PTU, the Networking Utility and our services, and to enforce licences.
• To process payments, renewals, refunds, disputes and affiliate payouts.
• To answer support tickets and emails, and to prepare and deliver bookings.
• To prevent fraud, chargeback abuse, licence sharing and attacks on our systems.
• With your consent, to measure whether our ads on X work.
• To keep records the law requires, such as tax and payment records.

If you are in the EU or UK, our legal bases are: performing our contract with you (account, licence, purchases, support), our legitimate interests (security, fraud prevention, licence enforcement, improving our tools), your consent (marketing measurement, which you can withdraw), and legal obligations (financial records).

• Sign-in cookie: keeps you logged in (30 days on the website, up to a year in PTU).
• Your cookie choice: remembers your consent choice for 180 days.
• Browser storage: saves unsent booking forms for 7 days and contact drafts for 72 hours on your device, plus short-lived sign-in and checkout checks that clear when you close the tab.
• Analytics: we count visits with Umami, which we host ourselves. It uses no cookies and does not track you across sites.
• Ad measurement (marketing consent only): the X (Twitter) pixel records visits, downloads and purchases so we can measure our ads. We also keep the link you arrived from (affiliate code, campaign tags, X click ID) in a cookie for 30 days. Without consent, an affiliate code is kept only until you close the tab and nothing goes to X.

We do not use Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, Microsoft Clarity or similar tools. Profile pictures on our testimonials load from X. You can change your cookie choice at any time from the cookie banner link in the footer.

• Stripe: payments, subscriptions and invoices.
• Discord: sign-in, our server and support tickets.
• Cloudflare: hosting network, downloads, spam protection on the contact form and the PTU speed test.
• Google (Gmail): delivers contact-form emails to us.
• Cubiqq: our Networking Utility partner receives your Discord ID to grant access.
• PayPal: affiliate cashouts are paid to the PayPal email you give us.
• X: ad measurement, only with your marketing consent.
• Our hosting providers: store our servers and databases.

We may also share information when the law requires it, to protect our rights or users, or as part of a sale or transfer of the business. We do not sell personal information, and we do not share it for cross-site advertising except the X measurement you can turn off.

• Account, licence, purchase, affiliate and support records are kept while your account exists, so we can support you, honour your licence and handle disputes.
• Payment and tax records are kept as long as the law requires, typically up to 7 years.
• Ticket bot logs are deleted after 30 days.
• Drafts in your browser expire as described above, and you can clear them yourself at any time.

Our site and API use encrypted connections, sign-in cookies cannot be read by scripts, only staff and contractors who need it can see account data, admin actions are logged, and ticket archives are encrypted. No system is perfectly secure, so please keep your Discord account protected too.

We serve customers worldwide from the United States. Your information is processed in the US and in the countries where our providers operate, with the safeguards those providers offer for international transfers.

• Ask what personal information we hold about you and get a copy.
• Ask us to correct information that is wrong.
• Withdraw marketing consent at any time from the cookie banner link in the footer.
• Object to processing based on our legitimate interests, or ask us to restrict it.
• Ask us to delete your information where the law where you live gives you that right (for example under the GDPR or California law). We keep records we are legally required to keep.

Send requests to [email protected]. We will confirm it is your account (usually through Discord) and reply within 30 days, or 45 days where California law allows. If you are in the EU or UK you can also complain to your data protection authority.

California residents: we do not sell personal information, and we do not use sensitive personal information to infer characteristics about you. You will not be treated differently for using your privacy rights. Nevada residents: we do not sell covered information.

Our website, PTU and services are not for children under 13, and we do not knowingly collect their information. If you're 13 to 17, you need a parent's or guardian's permission to make purchases. If you think a child under 13 has given us information, contact us and we'll delete it.

We update this policy when what we collect or how we use it changes, and we change the "Last updated" date above. Significant changes are announced on the website or our Discord server. Questions: [email protected].