Privacy Notice
Controller and scope
Crown Enterprises LLC, Dammstrasse 16, 6300 Zug, Switzerland. Contact: [email protected]. Crown Enterprises LLC is responsible for the website processing described here. This notice covers ApeBot.io accounts, checkout, licensing and support. Separately installed software, connected exchanges, blockchains and Paymento may have additional data flows and separate notices.
Information and purposes
Account details: name, email, password hash, account status and terms acceptance are used to create and administer your account. Security data includes sessions, anti-forgery tokens, rate-limit records, security events, optional encrypted authenticator enrollment, hashed recovery codes and administrator audit records. We use these to authenticate users, prevent abuse and investigate incidents.
Orders and access: product and plan choices, prices, provider references and statuses, accepted-policy snapshots, licenses, subscription periods, download events, access-device identifiers and periodic access checks are used to fulfill purchases and manage access. Confirmation emails include order details and the policies accepted with the order. A mail-delivery queue stores the recipient and message until delivered or operationally resolved.
Referrals: codes, attribution, reward amounts, public payout-wallet addresses and transfer references support the referral program. Public blockchain records may remain visible indefinitely and cannot be erased by us.
Support and privacy: we process contact information, requests, relevant order references, optional country/region and verification or resolution information to respond and protect accounts. Do not include wallet secrets or unnecessary sensitive information.
Newsletter: signup records your email, permission wording/version and timestamps. The current form records requests; newsletter confirmation and marketing delivery are not yet active. A transactional order confirmation is separate from marketing consent.
Technical requests: hosting and security providers process network requests, IP addresses and security information. The website uses essential session/security cookies and local language, privacy and motion preferences. The reviewed application does not load optional advertising or analytics trackers; deployment-level tracking must also remain disabled unless properly disclosed and authorized.
Grounds and choices
Where a legal basis is required, we process information to provide the requested contract, meet legal obligations, protect legitimate interests in security and administration, or act on a valid consent where appropriate. Agreeing to Terms is not blanket consent to marketing or all data processing. You may withdraw optional consent without affecting prior lawful processing. Automated license checks can restrict access; contact support for human review of a suspected error.
Recipients and international processing
Paymento receives checkout information including account email, order reference, currency, amount and payment-binding metadata. Hosting/database and backup providers process operational records; Cloudflare provides delivery and security services; a configured mail provider handles confirmation emails. Authorized administrators access information for their roles. We may disclose records where required by law or to protect legal rights. Third-party services you choose, including wallets, exchanges and merchandise fulfillment services, have their own notices.
Our website and database use a Namecheap VPS. Namecheap lists its VPS hosting in the United States. The operator keeps additional backups on a private PC in Switzerland. Mango Mail handles support mail and transactional order confirmations. Cloudflare provides network delivery and security through its international infrastructure. Paymento's terms identify Prokey Technologies Inc. in Ontario, Canada as the product owner; this identifies the provider, not every location where its systems process information.
Provider notices are available at https://www.namecheap.com/legal/general/privacy-policy/, https://mymangomail.com/privacy-policy, https://www.cloudflare.com/privacypolicy/ and https://paymento.io/privacy-policy/. These providers can involve international processing and onward transfers. We have not yet verified every provider processing destination or the account-specific transfer safeguards. Contact [email protected] for the current information; this notice does not claim that an unverified transfer contract or certification is in place. We are responsible for checking the applicable transfer requirements and updating this notice when that information is established.
Retention and security
We assess retention by the account/service purpose, transaction and accounting duties, fraud/security needs, disputes and applicable limitation periods. Deletion requests are reviewed for records that must be retained; closing an account does not automatically erase financial records or administrator audit history. Backup expiry and restoration controls must reflect the retention schedule. Public blockchain records are outside our deletion control. Access restrictions, password hashing, encrypted authenticator secrets and transport security reduce risk but do not make a system risk-free.
Retention is assessed by record type. Account and license records support the active account and purchased access. Order, payment and accepted-policy records support fulfillment, accounting and disputes. Security logs and support/privacy requests are retained for investigation, resolution and applicable legal claims. Email-queue records support delivery and troubleshooting. Records are reviewed for deletion or anonymization when those purposes and any required legal retention end. The current system does not automatically erase all closed-account records, sent confirmations or backup generations; deletion and backup expiry require an operator review. A deletion request also needs to be considered before personal data from an older backup is returned to active use.
Rights and contact
Email [email protected] with 'Privacy request' or use /privacy-center without signing in. Depending on applicable law, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent or review of a decision. We proportionately verify identity before disclosure or changes, explain applicable exceptions and respond within the required period. You may complain to the Swiss Federal Data Protection and Information Commissioner or another competent regulator. Rights under other jurisdictions apply where their legal requirements are met. The service is intended for adults; contact us if you believe a child's information was submitted.
Updates
We version published notices and retain the version accepted with orders. Material processing changes require appropriate notice and any consent or other legal basis required by law. Contact support for the version relevant to your purchase.
Physical merchandise and Printful
For a shipping quote, we send Printful your recipient name, delivery address, selected product option and quantity. For Florida deliveries we also collect the delivery county to calculate sales tax; the county selection is retained in the order record. A checkbox explains address sharing before you request a quote. We use this information to provide the requested quotation and fulfill your purchase. Following verified payment, authorized staff review your address and order and manually submit the fulfillment details to Printful. Printful and its fulfillment and delivery partners process the information needed to produce and deliver your goods. We do not send Printful your password or wallet secrets.
Shipping addresses are encrypted in the application database and are available only to authorized operational staff. Unconverted expired quotes are scheduled for deletion after one day by the order-email worker; an interrupted worker may delay deletion until it resumes. Once a quote becomes an order, its duplicate address copy is cleared, while the order address and transaction records are retained for fulfillment, support, accounting and applicable legal duties under the retention criteria above. This is not automatic deletion of completed orders or backup copies.
Printful's privacy notice is at https://www.printful.com/policies/privacy. Printful operates internationally; USA delivery does not guarantee that all associated data processing occurs only in the USA. Account-specific processing locations and transfer safeguards require operator verification; we do not claim unverified arrangements.