Skip to main content

Privacy Policy

Last updated: August 25, 2026

This Privacy Policy explains how CrZVRC collects and uses personal data when you purchase, activate, or use our VRChat assets, systems, and related services.

Controller and Contact​

The controller responsible for your personal data is CrZVRC, operated from Portugal.

Privacy email: crzvrc@gmail.com

You may also use our official Discord support server for technical-support requests. Please use the business contact above for data-protection requests.

Age Restriction​

CrZVRC products, systems, and assets are intended only for users aged 18 or older. By purchasing, downloading, or authenticating an Asset, you confirm that you meet this requirement. We do not knowingly collect personal data from children.

Data We Collect​

To provide a secure experience and prevent unauthorized distribution, our custom authentication API collects specific information when you activate your license. When you import and authenticate our assets via Unity, we securely log the following data:

  • Email Address: The email associated with your original purchase.
  • VRChat User ID: The specific VRChat account ID you provide to us during setup.
  • License Key Hash: A SHA-256 hash of your license key. We store this hash rather than the plain-text licence key.
  • License Type: The tier of your license (e.g., Personal or Commercial).
  • Store Source: The platform where the purchase was originated (e.g., Jinxxy or Booth).
  • Product ID: The internal identifier of the specific asset you are activating.
  • Activation Status: The current valid, revoked, or expired state of the license.
  • Activation Timestamp: The exact date and time the authentication request was created.

Data Usage​

This information is collected exclusively to validate your purchase, deliver the correct asset files to your Unity project, and provide accurate technical support. We use this data strictly for internal security and license management, and we do not sell your information to third parties.

Services That Process Your Data​

The following services process data as part of providing and managing your licence:

  • Jinxxy: purchase and licence information used for licence activation.
  • CrZVRC database: our database stores the licence and activation data described in this Policy.
  • CrZVRC licence-management API: our API validates and manages licence activations and status.

Data Retention and Removal​

We retain licence, activation, and related account data indefinitely for licence management, security, and support purposes.

You may request removal of your personal data by contacting crzvrc@gmail.com. Because licence management depends on this data, a completed removal request will permanently revoke all licences associated with your account and prevent those licences from being activated again. We may retain limited information where necessary to comply with legal obligations or protect against fraud and licence misuse.

Your Rights​

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of processing of your personal data. You may also request data portability, object to processing based on legitimate interests, and withdraw consent where processing is based on consent.

To exercise these rights, contact us using the privacy contact listed above. You also have the right to lodge a complaint with Portugal's data-protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or with your local supervisory authority.

Communications and Updates​

When you authenticate your VRChat account and provide your email address, you agree to receive communications from CrZVRC. These include critical product updates and security patches.

Security​

We use reasonable technical and organisational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to This Policy​

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Where required by law, we will provide additional notice of material changes.