Privacy Policy

Last Updated: 26 October 2026

This policy explains what information Alt F4 LLC collects when you use altf4.codes, why we collect it, who else sees it, and what you can do about it. We have tried to write it in plain language. Where we have to be precise, we have chosen precision over friendliness.

Alt F4 LLC is a limited liability company registered in the State of Missouri, United States. We are the data controller for the information described here — meaning we decide what is collected and why, and we are accountable for it.

1. Who We Are and How to Reach Us

Alt F4 LLC
Kansas City, Missouri, United States

Privacy questions: support@altf4.codes

2. Geographic Scope — Read This First

Alt F4 sells to customers in the United States only. Our checkout is geo-restricted to the US. We do not knowingly sell to, or collect personal data from, customers in the European Union, the European Economic Area, or the United Kingdom.

This policy is written for that reality. It describes US privacy obligations. It does not claim compliance with the EU General Data Protection Regulation or the UK GDPR, because we do not operate in those markets and would rather say nothing than claim a compliance posture we have not built.

3. What We Collect

3.1 Information you give us

  • Your email address — we need it to send your receipt and to contact you about your order. You need an account on this site to see your key, and your key is delivered to your account, not by email.
  • Order information — what you bought, when, and for how much.
  • Billing information — your name and billing address, which we need to verify your payment.
  • Support correspondence — anything you send us at support@altf4.codes, including screenshots you attach to a refund claim.
  • Order checks — if we check an order by hand, what we ask you for to confirm it: a photo of your ID, a photo of your card with everything but the last four digits covered, or a screenshot of the pending charge in your bank or card app, and your phone number if we call or text you.
  • Help chat messages — anything you type into the help chat on our site. The help chat is an automated assistant, not a person. Please don't type card numbers, keys, passwords or ID details into it. If you do, we remove anything that looks like a card number, a key or an ID number before your message is answered or saved.

3.2 Information we collect automatically

  • Your IP address, captured at checkout.
  • Device and browser information.
  • Site usage — pages viewed, items added to cart.
  • If you open the help chat — a check that you're a person, not a bot (Cloudflare Turnstile), which reads your IP address and basic details about your browser and connection. It loads only when you open the chat; and your IP address, which we use only to limit how many messages can be sent. We don't store your IP address for the chat. The limit uses a scrambled version of it that we replace every day.

We keep the checkout IP address deliberately, and you should know why: if someone disputes a charge, it is one of the few pieces of evidence that shows the order was placed by the person who owns the card. It protects legitimate customers from having their purchases reversed by someone else.

3.3 What we never collect

We never see your card number. Card details are entered into Shopify's hosted checkout and processed by Shopify Payments. If you pay with PayPal or Amazon Pay, you enter your payment details with PayPal or Amazon instead. None of these details land on any system Alt F4 owns or operates. If we check an order by hand, we never ask for your full card number or your card's security code. We could not show you your own card number if you asked us to.

4. Why We Collect It

  • To sell you a thing and deliver it. Your key is delivered to your account on this site.
  • To verify payment. Your billing address is checked against your card issuer's records. To confirm an order we check by hand, and to show the order was yours if the charge is ever disputed.
  • To defend against chargebacks. Order, IP, and delivery records are how we demonstrate that a legitimate order was placed and fulfilled.
  • To answer your email.
  • To answer your questions in the help chat.
  • To meet legal and tax obligations.

5. Who Else Sees Your Information

We don't rent or trade your personal information. When you browse or buy, our store sends Google information about that visit, such as the pages you view and what you buy, so we can see how our Google listings and ads perform. Shopify, which runs our store, may also use store data for advertising and personalization under its own terms. Some state privacy laws may count either of these as "sharing." Your choices are in section 7.

We do share it with the companies that make the store work. Each of these receives only what it needs:

5.1 Who receives your information

  • Shopify — hosts the storefront and the checkout. Receives your account, order, and payment data. Shopify is the token vault of record for card data. It may also use store data for advertising and personalization across its network, under Shopify's own terms.
  • Shopify Payments — our payment processor. Receives your card and billing data to process the transaction, and settles funds to us.
  • PayPal and Amazon Pay — if you choose one of them at checkout, it receives the payment details you give it to process that payment.
  • Orders placed before 20 September 2026 were processed through Authorize.net and Kurv (formerly Electronic Merchant Systems), which keep their own records of those transactions.
  • Our key suppliers — for most orders, we buy your key from a business-to-business supplier once your order is confirmed. For each of those orders, we send the supplier the product, the quantity, the price and our own order reference. We don't send your name, email address, billing address or payment details. Some of our suppliers are based outside the United States. Your key is shown on your order page by our own app.
  • Google — our email provider. Anything you email us is stored with Google, including photos you send to confirm an order.
  • Google — our store's Google tag tells Google which pages you view and what you buy, so we can measure our Google listings and ads.
  • Wyllo (formerly NoFraud) — screens orders for fraud. It receives order and device details to check whether an order looks legitimate.
  • Anthropic — provides the AI model behind our help chat. It receives what you type into the chat (with card numbers, keys and ID numbers already removed), the assistant's replies, and the product details or order status the assistant looks up to answer you. We don't send it your name, email address or card details from our records, and it never receives your keys; it sees only what you type and what the assistant looks up. Anthropic deletes this information from its systems within 30 days, unless the law requires it to keep it longer, and doesn't use it to train its models. It may keep a conversation for up to 2 years if its automated safety systems flag it.
  • Cloudflare — runs the help chat's server and the check that you're a person, and stores the chat log for us until it's deleted after 30 days (see section 6). Cloudflare also runs the order page that shows your key. There it keeps a record of when your key was shown to you, for a year, and a scrambled fingerprint of each key we sold you (never the key itself), kept with your order. It also keeps your IP address for up to 7 days to stop abuse of that page. Your chat messages and IP address pass through Cloudflare on the way to the assistant; the connection to the AI model doesn't keep a separate copy of what you type. Cloudflare also uses the person-check details to improve that check.

Apps on our store — some apps installed on our store can access customer or order information to do their job. They include our own apps, which show your key on your order page, mark orders fulfilled, issue refunds and keep our accounts; an app that runs customer accounts; a loyalty and wishlist app; a reviews app; fraud-screening tools; automation tools that act on orders; and tools we use to run checkout and manage the store.

5.2 Other disclosures

  • When the law requires it — a valid subpoena, court order, or lawful request.
  • To defend a dispute — if you file a chargeback, we provide your card issuer with the order record, delivery confirmation, and related evidence.
  • If the business is sold — customer records would transfer with it. We would tell you first.

6. How Long We Keep It

We keep your information for as long as we still need it, and then we stop. Except for the help chat and the order page that shows your key (below), there is no fixed number of days here, and that is deliberate — a number would be either misleading or wrong, and we would rather tell you what actually governs it.

What we keep, and why

  • Your order and transaction records are kept for as long as we need them for tax and accounting, for fraud prevention, and to defend a payment dispute. That last one is the reason a short fixed window would be dishonest: the card networks' dispute windows can run well over a year, and if someone disputes a charge we have to be able to show what actually happened. Anything you send us to confirm an order is kept with that order's records, for the same reasons.
  • Your account information is kept while your account exists.
  • Your emails to us are kept while we may still need them — to resolve your issue, and to understand it if it comes back.
  • The order page that shows your key keeps a record of when your key was shown to you for a year, and your IP address for up to 7 days, to stop abuse of that page.
  • Help chat conversations are deleted after 30 days. Card numbers, keys and ID numbers are removed before anything is saved. After that we keep only daily totals with no chat text in them, such as how many chats there were, for 13 months. The chat itself never stores your name, email address, order number or IP address.

What "delete my data" actually gets you — stated plainly

You can ask us to erase your personal information, and we will. But we want to be straight with you about what that does and does not do:

Your personal details are redacted — your name, your address. The record of the transaction itself remains. The fact that an order was placed, and when, stays in our system, because we are legally required to keep it for tax purposes and practically required to keep it if a payment is ever disputed.

Erasure is not the same as the sale never having happened. Any store that tells you otherwise is either confused or not telling you the truth about their books.

Shopify

Our store runs on Shopify, and Shopify holds this data on our behalf as our processor. Its own retention is governed by its Data Processing Addendum and its privacy policy, which are its terms, not ours — so we point you at them rather than paraphrasing them and getting it subtly wrong.

Where we no longer need a record for any of the purposes above, it is deleted or anonymized.

7. Your Rights

Some US states give their residents specific privacy rights. Alt F4 is small enough that most of those laws do not yet reach us by their own thresholds. We are granting the rights anyway, to everyone, regardless of where you live.

You can ask us to:

  • Tell you what we hold. We will give you a copy of the personal information we have about you.
  • Correct it. If something is wrong, tell us and we will fix it.
  • Delete it. We will delete your personal information, subject to records we are legally required to keep (tax records, and evidence relating to a payment dispute).
  • Opt out of sharing for advertising. Some state laws may count what our store sends Google, and Shopify's use of store data for advertising, as "sharing." You can opt out on our Your Privacy Choices page, or by turning on Global Privacy Control in your browser.

How to ask: email support@altf4.codes. We will respond within 45 days. If we need longer, we will tell you why before that deadline passes.

It costs you nothing, and we will not treat you differently for asking. No worse prices, no degraded service, no quiet account flag. Asking what a company knows about you is a reasonable thing to do and we are not going to penalize it.

8. Cookies

We use cookies that are essential to running the store: keeping you signed in, remembering your cart, and protecting against fraud. These can't be switched off, because the store doesn't work without them.

Shopify's analytics and Google's measurement and ad-tracking tags are optional. In the United States they're on by default. You can turn them off at any time in Cookie Preferences, at the bottom of any page, and you can opt out of sharing for advertising on our Your Privacy Choices page or by turning on Global Privacy Control in your browser.

Some other services load on every visit, whatever you choose, because parts of the store depend on them: Google Tag Manager's loader (the Google tags inside it still wait for your choice), Shop and Shopify's own performance reporting, our wishlist, error reporting, web fonts, the reviews widget where it appears, our account service, the image servers that show game art, a public code library server, and video embeds (YouTube, in privacy-enhanced mode). They load from their own servers and can store small items in your browser or record that you visited.

The help chat keeps your open conversation in your browser's session storage, not in a cookie, so it stays on screen as you move between pages. It's needed for the chat to work, it stays on your device, and your browser clears it when you close the tab.

We recognize and honor Global Privacy Control (GPC) browser signals as valid opt-out requests.

9. Children

Alt F4 is for adults. You must be 18 or older to buy from us, consistent with our Terms of Service.

We do not knowingly collect personal information from anyone under 13. If we learn that we have, we delete it. If you believe a child has given us information, email support@altf4.codes and we will remove it.

10. How We Protect It

Alt F4 does not operate its own payment infrastructure. Card data is handled by Shopify Payments, or by PayPal or Amazon when you pay with them, and never reaches our systems.

For the data we do hold — your account, your orders, your emails to us — we maintain an Information Security Policy covering access control, multi-factor authentication on administrative accounts, vendor risk management, and incident response.

We are not going to tell you your data is "100% secure." Nobody's is, and any company that tells you otherwise is either lying or has not thought about it carefully. What we can tell you is exactly where your data goes and who is accountable for it there — which is the part we actually control.

If your data is ever breached, we will tell you — without unreasonable delay, and in no event later than required by applicable state law.

11. Changes to This Policy

When we change this policy, we post the new version on this page and update the "Last Updated" date at the top. Check that date to see when it last changed.

12. Questions

Email support@altf4.codes. A person reads it.