Dubai Corporate Entity (Meydan Free Zone, Dubai, UAE) · Paddle Merchant of Record Compliant

Zero-Retention Privacy Notice

UAE PDPL & GDPR Privacy Disclosure · Effective Date: October 30, 2026 · Licensor: IM GAMES L.L.C-FZ (License No. 2310563.01 · TRN 104638954800001)

Zero-Retention Core Principle: Customer technical files, schemas, CAD drawings, and code snippets uploaded for compilation are processed exclusively in volatile Edge / Container RAM and are cryptographically discarded immediately upon delivery of the HTTP response. We maintain zero persistent database of customer payload files.

1. Data Controller & Applicable Frameworks

For website telemetry, IM GAMES L.L.C-FZ (Meydan Free Zone License No. 2310563.01, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.) acts as Data Controller in accordance with UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (UAE PDPL) and, where applicable, the UK/EU General Data Protection Regulation (GDPR). For payment card processing, billing address verification, and tax invoicing, Paddle.com Market Ltd acts as an independent Controller and Merchant of Record (Paddle Privacy Policy).

2. Categories of Data Processed

Customer Technical Payloads (Ephemeral RAM Only — 0 Seconds Post-Response Retention): Input files are parsed in memory to compute structural diagnostics and synthesize output bundles, then immediately dereferenced and purged.
Billing & Entitlement Tokens: Paddle processes payment instruments and remits an HMAC-signed transaction identifier and masked receipt metadata to issue stateless cryptographic download entitlements.
Edge Abuse Prevention: One-way SHA-256 salted hashes of request IPs are held in Cloudflare Edge KV with automatic short-lived TTL solely for DDoS and rate-limit protection.

3. Cookies & Zero Cross-Site Tracking

Our storefronts use strictly necessary session/checkout scripts required by Paddle.js to complete payment and fraud prevention. We do not sell personal data or run third-party behavioral ad-broker pixels.

4. Data Subject Rights & Contact

Inquiries regarding UAE PDPL or GDPR rights may be directed to legal@heycheck.com. Billing data requests may also be submitted directly through your Paddle receipt link.