Real ("we," "us," or "our") runs projectreal.net. This policy explains what we collect, what we do with it, and what we don't.
Read it. If you don't want to be covered by it, stop using the site and software.
1. Information We Collect
What you give us directly
Things you choose to send us, like:
- Your email if you write in for support.
- Your Discord profile when you talk to us in our server.
- License key info, when we need to verify it.
- Account username and email address.
- Password (stored as a one-way Argon2id hash — we never store your plaintext password).
- Device hardware fingerprint (HWID, hashed with a secret key — never stored in raw form).
What gets collected automatically
When you load projectreal.net, we may pick up:
- IP address and rough location, country or region level.
- Browser and version.
- Operating system.
- Which pages you looked at and how long.
- Where you came from.
- Anonymous device IDs for analytics.
What the software itself collects
The Real executor may collect:
- Your license key and a hardware-derived device ID, used to validate the license.
- Crash and error reports, only if you opted in. We use them to fix bugs.
We don't read your scripts, your files, or anything else on your machine.
2. What we do with it
We use what we collect to:
- Validate licenses and keep track of them.
- Catch fraud and key abuse.
- Reply to support tickets.
- Look at site traffic so we can fix what's broken.
- Send updates and security alerts, if you've said yes to that.
- Enforce the Terms of Service.
3. Cookies and tracking
We use cookies and similar tools for analytics. The full list and what each does is in the Cookie Policy.
You can turn cookies off in your browser. Some parts of the site may stop working properly if you do.
4. Sharing
We don't sell, trade, or rent your data. We share it only when:
- Service providers need it to do their job. Hosting and analytics vendors are bound by NDAs.
- The law requires it.
- We need to protect Real, our users, or someone else from harm.
- The company changes hands through a sale or merger. Your data goes with it.
5. How long we keep it
We hold on to data only as long as we need it for the things listed above, or as long as the law tells us to. License and device data sticks around while your license is active. Analytics data goes after about 24 months.
6. Security
We take reasonable steps to protect your data. No system is bulletproof, so we can't promise it's untouchable, but we treat it like ours.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can correct inaccurate data through your account settings or by contacting us.
- Right to erasure — you can request deletion of your account and associated personal data by emailing support@projectreal.net. We will process your request within 30 days.
- Right to data portability — you can request a machine-readable export of your account data by emailing us.
- Right to object / withdraw consent — you can opt out of non-essential analytics at any time using our cookie banner.
To exercise any of these rights, contact support@projectreal.net. We may need to verify your identity before processing your request.
8. Kids
Real isn't built for anyone under 13. We don't knowingly collect data from kids that age. If we find out we did, we delete it.
9. Other sites we link to
We link out to places like Discord and the reseller stores. This policy doesn't cover those. Read their policies before you trust them with anything.
10. Changes
We update this policy now and then. New versions go up at projectreal.net/privacy with a fresh effective date. Keeping using us after the change means you're fine with it.
11. Contact
Privacy questions go to support@projectreal.net or our Discord.
12. Third-Party Services
We use the following third-party services that may process your data:
- Cloudflare — CDN, DDoS protection, and bot-challenge (Turnstile). Cloudflare may log request metadata including IP addresses. See Cloudflare Privacy Policy.
- Resend — transactional email delivery (account verification, password resets). Resend receives your email address and the content of emails we send you. See Resend Privacy Policy.
We do not sell, rent, or share your personal data with advertisers or any third party beyond what is necessary to operate the service.
13. Data Retention
We keep your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., fraud prevention records for up to 12 months). Audit logs are retained for up to 12 months and then purged automatically.