Last updated: September 17, 2026
Short version: we only store what is needed to run your account, your license and your Discord link. No payment data, no trackers, no ads, and we never sell your data.
1. Data we collect
- Account data: your username, a bcrypt hash of your password, your license key, your HWID hash, and your subscription status and expiry date.
- Encrypted credentials: when you link Discord, the link site stores your mousecc password in encrypted (AES-GCM) form so your subscription status can be checked without asking you to log in again. It is never readable by anyone with access to the site.
- Discord data (only if you link): your Discord user ID, username and avatar, stored so we can give you the Buyer role and show your link status on mousecc.site.
- Agreements: your username, the version of the Terms and Privacy Policy you accepted, and when you accepted them.
- Essential cookies: one encrypted session cookie that keeps you logged in. No analytics, advertising or tracking cookies.
2. Data we never collect
Payments are processed entirely by PayPal and we never see your card details. For each purchase we store the PayPal order id, the plan you bought and the payer email address, so we can support you and keep purchase records. We do not run ads, analytics or third-party trackers on this site.
3. Why we use your data
To run your account and subscription, enforce licensing and HWID limits, provide the Buyer Discord role, support you, prevent abuse, and keep records of legal agreement.
4. Third parties
- Cloudflare: hosts this site and protects it from attacks.
- Supabase: hosts the database that stores the data listed above.
- PayPal: if you buy a key, PayPal processes the payment and shares the order id and payer email with us.
- Discord: if you link your account, Discord's OAuth flow shares your ID, username and avatar with us. Discord's own privacy policy also applies.
- Valve / Steam: unrelated to us, but the Software interacts with Counter-Strike 2 on your computer at your own risk.
5. Security
Everything runs over HTTPS. Passwords are hashed with bcrypt. Session cookies and stored credentials are encrypted with AES-GCM. Database access is restricted to the server and the database is not publicly readable.
6. Retention
We keep your data while your account exists. If you want your account and data deleted, contact us on Discord and we will remove them.
7. Your rights
You can ask to see, correct or delete the data connected to your account at any time by contacting us on Discord. If you are in the EU or UK, you also have the right to object to processing and to lodge a complaint with your local data protection authority.
8. Children
The Service is not intended for children under 13, and you must be at least 13 to have an account, in line with Discord and Counter-Strike 2. If we learn an account belongs to a child under 13, we will delete it.
9. Changes
If we change this policy, we update this page and the version number. When a change is important, existing users will be asked to accept the new version before continuing.
10. Contact
Privacy questions or deletion requests? Reach us through our Discord server, which you can join from link.mousecc.site.