Ofustech · Opus

Privacy policy

Last updated: 1 August 2026 · soft launch

Ofustech (“we”, “us”) operates Opus and opusbot.net. This policy explains what personal data we process and why. Where GDPR applies, we rely on the legal bases in section 3 — not on blanket consent merely from visiting the site.

1. What we collect

• Account data: email address and password hash (we do not store plain-text passwords).
• License data: license expiry, trial usage, and a hardware identifier (HWID) hash used to limit trial and device abuse.
• Session data: website login cookies and related timestamps.
• Payment data: payment records needed to fulfill orders (processed by PayPal; we do not store full card numbers).
• Technical logs: approximate IP, timestamps, and error logs for security, rate-limiting, and abuse prevention.
• Email verification: tokens and delivery status for account verification messages.
• Bot protection: Cloudflare Turnstile runs when you use login or registration forms. It may process technical signals (e.g. IP, browser data) under Cloudflare’s terms to stop abuse. The Turnstile script loads only on pages that show those forms, when the widget is needed.

2. Why we process data

• Create and secure accounts
• Provide and enforce licenses and trials
• Process purchases and prevent fraud
• Send verification and essential service emails
• Operate, secure, and improve the website and license service
• Comply with legal obligations

3. Legal bases (EU / EEA)

Where GDPR applies, we process data based on contract performance (providing your account and license), legitimate interests (security, abuse prevention, service operation), consent (where required, e.g. certain cookies / marketing), and legal obligation.

4. Sharing

We do not sell your personal data. We may share data with processors that help us run the service, under confidentiality obligations, such as:

• Cloudflare (hosting, CDN, DDoS protection, Turnstile)
• Resend (transactional email)
• PayPal (payments)

We may disclose data if required by law or to protect rights, safety, or prevent fraud.

5. International transfers

Some processors are based outside the EU/EEA (for example in the United States), or may process data on infrastructure outside the EU/EEA. Where personal data is transferred to a third country, we rely on appropriate safeguards under GDPR, typically:

• the EU–US Data Privacy Framework (DPF) where the processor is certified, and/or
• the European Commission’s Standard Contractual Clauses (SCCs) in the processor’s terms (Cloudflare, PayPal, Resend, and similar providers publish these).

You can ask us for more detail via privacy@opusbot.net.

6. Cookies

We use essential cookies for website login sessions (opus_web) and security. Payment return flows may use cookies from PayPal on their domain. Cloudflare Turnstile may set cookies or similar storage when you interact with a protected form. We do not use advertising or analytics cookies. You can control cookies in your browser; disabling essential cookies may break login.

7. Retention

We keep account and license records while your account exists. After you delete your account (or we erase it on request), we remove your email, password hash, license row, and sessions. We may retain limited anonymized records where needed for bookkeeping, fraud prevention, or legal requirements — for example payment amounts/dates without your email, and hardware-id hashes used only to limit trial abuse (no longer linked to your account).

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or lodge a complaint with a supervisory authority (in Sweden: Integritetsskyddsmyndigheten).

• Self-service: sign in at Account to download a copy of your data or permanently delete your account.
• By email: write to privacy@opusbot.net. We aim to respond within 30 days.

Processors such as PayPal, Cloudflare, or Resend may retain their own records under their policies; we can erase the copy we hold in Opus.

9. Security

We use reasonable technical measures (HTTPS, hashed passwords, access controls). No method of transmission or storage is 100% secure.

10. Children

Opus is not directed at children under 16. Do not register if you are under 16.

11. Changes

We may update this policy. The “Last updated” date at the top will change. Continued use after changes means you accept the updated policy.

12. Contact

Controller (soft launch): Ofustech · product Opus · opusbot.net
Ofustech is currently operating a limited soft launch. A Swedish organisation number and postal address will be published here when the business is formally registered. Until then, privacy and legal requests go to privacy@opusbot.net (routed to the operator).

See also our Terms of use. We have no affiliation with CipSoft GmbH or any official game publisher.