Privacy policy
Last updated: 1 October 2026
This policy explains what personal data Missclick ("we", "us") collects when you use https://missclick.dk and our launcher, why we collect it, and what rights you have over it. We are the data controller for this data under the EU General Data Protection Regulation (GDPR).
1. Who we are
Controller: [LEGAL ENTITY NAME]
Address: [POSTAL ADDRESS]
CVR / company no.: [CVR NUMBER]
Privacy contact: [PRIVACY EMAIL]
2. What we collect and why
Account data
When you register we store your user name, email address and a hashed password (Argon2id — we never store the password itself). We use this to create and secure your account, to let other members identify you, and to send you the account emails described below. Legal basis: performance of our contract with you.
Content you post
Threads, replies, profile comments, reactions, workshop uploads, support tickets and inbox messages are stored along with your account. Anything you post in a public area of the site is visible to other visitors. Legal basis: performance of our contract with you.
Technical and security data
We record the IP address you register and sign in from, a coarse network identifier derived from it, your browser user agent, and a log of account security events (sign-ins, password changes, two-factor changes, session activity). Our API keeps a request log containing the IP, path, response status and timing for each launcher request. We use this to keep accounts secure, to detect account sharing and abuse, and to investigate incidents. Legal basis: our legitimate interest in securing the service and preventing fraud.
Device identifiers (launcher)
When you sign in to the launcher it pins your account to your device. We do not receive your hardware serial numbers in readable form: the launcher sends one-way hashes of device characteristics (machine, firmware, volume and network adapter identifiers), and only those hashes are stored. We use them solely to enforce one account per device and to detect shared or resold accounts. Staff can reset the device lock if your hardware changes. Legal basis: our legitimate interest in preventing account sharing, and performance of our contract with you.
Payment data
We do not receive or store your card number, bank details or crypto wallet keys. Payments are handled by our payment providers (see section 4); we only store the resulting order record — plan, amount, currency, provider reference and status — and the invoice generated from it. Legal basis: performance of our contract with you, and our legal obligation to keep accounting records.
3. Cookies
We use only cookies that are necessary for the site to work. We do not use advertising or analytics cookies, and there is no third-party tracking on this site.
ts_sid— your session. Keeps you signed in while you browse. Expires when you close your browser or after two hours of inactivity.ts_remember— set only if you tick "stay signed in". Lets you return without signing in again. Expires after 30 days, and is revoked when you log out.
Because these are strictly necessary for a service you have asked for, they do not require consent under the ePrivacy rules.
4. Who we share data with
We do not sell your data. We share the minimum necessary with the following processors and services:
- Simply.com — our hosting and email provider (Denmark, EU). Stores everything above and delivers our outgoing email.
- PayPal — processes card and PayPal payments. You deal with PayPal directly; we receive only the order result.
- NOWPayments — processes cryptocurrency payments, on the same basis.
- proxycheck.io — we submit the IP address of a registration or sign-in attempt to check whether it is a VPN, proxy or hosting IP, as an anti-abuse measure. No other data is sent.
- Discord — if you open a support ticket, a notification containing the ticket subject is sent to our staff channel. Linking a Discord account is optional.
We will also disclose data where we are legally required to, or where it is necessary to establish or defend a legal claim.
5. International transfers
Our hosting and email stay within the EU. PayPal, NOWPayments, proxycheck.io and Discord may process data outside the EU/EEA; those transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Emails we send
We send only transactional email — email confirmation, password resets, support ticket replies, subscription activation and expiry reminders, payment problems, and your invoices. We do not send marketing email, so there is no mailing list to unsubscribe from. Account security emails cannot be switched off while your account is open.
7. How long we keep it
- Account and content — for as long as your account exists.
- Email and password-reset tokens — 48 hours and 1 hour respectively, then deleted.
- Security and API request logs — kept for a limited period for abuse investigation, then removed on a rolling basis.
- Invoices and order records — 5 years, as required by Danish bookkeeping law (bogføringsloven). These survive account deletion because we are legally required to keep them.
- Ban records — retained after deletion, in hashed form, so that bans cannot be evaded.
8. Your rights
Under the GDPR you have the right to request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and to object to processing based on our legitimate interests. You can change most of your details yourself from your account page. For anything else, contact us at [PRIVACY EMAIL] and we will respond within one month.
If you are unhappy with how we handle your data you can complain to the Danish Data Protection Agency (Datatilsynet).
9. Deleting your account
Open a support ticket to request deletion. We remove your account, email address and device hashes, and detach your posts. We keep invoices and ban records as described in section 7.
10. Security
The site is served over HTTPS only, passwords are hashed with Argon2id, two-factor authentication is available (and required for staff), and sessions are rotated regularly. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
11. Children
This service is not intended for anyone under 15, and we do not knowingly collect data from children. If you believe a child has registered, contact us and we will remove the account.
12. Changes
If we make a material change to this policy we will announce it on the forums. The date at the top of this page always shows the current version.