Privacy Policy

Last updated: September 17, 2026

This Privacy Policy explains how Darkidox (“Darkidox,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you visit darkidox.com, create an account, place an order, contact customer support, use live chat, or otherwise interact with our services (collectively, the “Services”).

This Privacy Policy should be read together with our Terms of Service, Refund Policy, Cookie Policy, and other policies displayed on our Website.

1. Who We Are and Data Controller Information

Darkidox is an independent online store offering digital in-game items and related delivery services.

For the purposes of the General Data Protection Regulation (“GDPR”) and other applicable data protection laws, the data controller is:

Data controller: Emilis Jarašūnas, trading as Darkidox
Legal form: Individual activity under a certificate registered in Lithuania
Individual activity certificate No.: 1547229
Business address: Vytauto g. 263, LT-77182 Šiauliai, Lithuania
Email: support@darkidox.com
Website: darkidox.com

The data controller determines how and why personal data is processed in connection with the Services.

2. Personal Data We Collect

The personal data we collect depends on how you use the Services.

We may collect the following categories of personal data.

2.1 Identity and Contact Information

We may collect:

First and last name;
Email address;
Telephone number, if voluntarily provided;
Billing address;
Country or region;
Customer account details; and
Other contact information you choose to provide.

2.2 Account Information

If you create or receive a Darkidox account, we may process:

Your name;
Email address;
Account username;
Password stored in protected, hashed form;
Account preferences;
Order history;
Login activity; and
Account security information.

We cannot view your original account password. You are responsible for keeping your account credentials secure.

2.3 Order and Transaction Information

When you place an order, we may collect:

Order number;
Products purchased;
Item names and quantities;
Purchase date and time;
Order value and currency;
Payment status;
Billing information;
Discount or promotional code usage;
Refund and cancellation history;
Chargeback or payment dispute information;
Order notes; and
Customer instructions.

2.4 Game and Delivery Information

To fulfil and verify digital item orders, we may collect:

Game or platform name;
Game username or display name;
User, character, account, or server identifier;
Selected server or delivery destination;
Delivery instructions;
Trade, gift, transfer, or delivery status;
Delivery attempt records;
Date and time of delivery;
Item names and quantities delivered;
Screenshots, recordings, confirmations, or other delivery evidence;
Internal fulfilment notes; and
Customer confirmation of receipt.

We do not need your game account password to deliver an order. You should never send us passwords, authentication codes, recovery codes, backup codes, or other sensitive account credentials.

2.5 Payment Information

When online payment options are enabled, payments will be processed by one or more third-party payment service providers identified during checkout.

The available provider may vary depending on factors such as your location, currency, selected payment method, transaction risk, and service availability. The applicable payment option and provider will be shown before you submit your payment.

We may receive limited payment-related information, such as:

Payment status;
Transaction identifier;
Payment method type;
Payment amount and currency;
Limited payment card details, such as the last four digits, where provided;
Billing information;
Fraud or risk indicators;
Refund information;
Reversal information; and
Chargeback or payment dispute information.

Darkidox does not intentionally collect or store complete payment card numbers or card security codes.

Complete payment credentials are processed by the relevant payment provider according to its own privacy and security practices.

2.6 Customer Support and Live Chat Information

If you contact us by email or through JivoChat, we may collect:

Your name;
Email address;
Order number;
Game username;
Support category;
Messages and chat history;
Screenshots, images, or other attachments;
Delivery issue information;
Refund or withdrawal request details;
Dates and times of communications; and
Internal notes needed to resolve the request.

We use JivoChat to provide live customer support. JivoChat may also process technical information about your visit, device, browser, IP address, and chat activity according to its own privacy practices.

Please do not send unnecessary sensitive information through live chat or email.

2.7 Reviews and Submitted Content

If you voluntarily submit a review, rating, testimonial, screenshot, image, video, or other feedback, we may collect:

Your name or chosen public display name;
Email address;
Order and product information;
Rating or review content;
Images or videos submitted;
Submission date; and
Information used to verify that the review relates to a genuine purchase.

We will not intentionally publish your email address, billing information, payment information, private support conversation, or identifying order details without an appropriate legal basis or permission.

2.8 Device and Technical Information

When you access our Website, we or our service providers may automatically process:

IP address;
Browser type and version;
Device type;
Operating system;
Approximate location derived from your IP address;
Referring website;
Pages and products viewed;
Search and cart activity;
Session identifiers;
Cookie or local storage identifiers;
Login activity;
Server logs;
Security information;
Fraud indicators; and
Error and diagnostic information.

We use this information to operate and secure the Website, maintain shopping cart and account functionality, diagnose errors, prevent abuse, and understand Website performance.

3. How We Collect Personal Data

We collect personal data from the following sources.

3.1 Directly From You

We receive personal data when you:

Create an account;
Place an order;
Enter delivery information;
Contact customer support;
Use live chat;
Request a cancellation, withdrawal, or refund;
Submit a review;
Respond to an email; or
Otherwise provide information to us.

3.2 Automatically

Technical information may be collected automatically through:

WordPress and WooCommerce;
Server logs;
Cookies and local storage;
Security systems;
JivoChat;
Hosting infrastructure; and
Other technologies required to operate the Website.

3.3 From Service Providers and Other Parties

We may receive personal data from:

Payment service providers;
Banks and payment networks;
Fraud-prevention providers;
Hosting and security providers;
JivoChat;
Email service providers;
Customer service providers; and
Other providers involved in processing an order or resolving a dispute.

4. How We Use Personal Data

We may use personal data for the following purposes:

Operating and maintaining darkidox.com;
Creating and managing customer accounts;
Processing payments and orders;
Delivering digital in-game items;
Verifying that delivery was completed;
Communicating about orders and delivery;
Providing live chat and email support;
Investigating missing, incorrect, or disputed orders;
Processing eligible cancellations, withdrawals, or refunds;
Preventing unauthorized payments, fraud, abuse, and security incidents;
Responding to payment disputes and chargebacks;
Securing the Website and customer accounts;
Diagnosing technical problems;
Maintaining accounting, tax, and business records;
Complying with consumer protection and other legal obligations;
Responding to lawful requests from authorities;
Establishing, exercising, or defending legal claims;
Collecting and displaying genuine reviews where appropriate;
Improving our Website, fulfilment process, and customer service; and
Sending marketing communications where we have an appropriate legal basis and any legally required consent.

We do not use personal data for materially unrelated purposes without an appropriate legal basis.

5. Legal Bases for Processing

Where the GDPR applies, we process personal data using one or more of the following legal bases.

5.1 Performance of a Contract

We process personal data where necessary to:

Accept and process an order;
Receive payment confirmation;
Deliver purchased items;
Communicate about fulfilment;
Maintain a customer account;
Provide customer support; and
Process cancellations, withdrawals, or refunds.

Providing certain personal data is necessary to enter into or perform a contract with us. Without this information, we may be unable to accept, process, or deliver an order.

5.2 Compliance With Legal Obligations

We may process and retain personal data where necessary to comply with:

Tax and accounting obligations;
Consumer protection requirements;
Financial and payment obligations;
Valid requests from authorities;
Court orders; and
Other applicable legal requirements.

5.3 Legitimate Interests

We may process personal data where necessary for our legitimate interests, including:

Preventing fraud and unauthorized payments;
Protecting our Website and systems;
Preserving reasonable evidence of order fulfilment;
Investigating abuse;
Responding to chargebacks and disputes;
Improving customer support;
Diagnosing technical problems;
Maintaining service quality;
Protecting our business; and
Establishing, exercising, or defending legal claims.

Before relying on legitimate interests, we consider whether our interests are overridden by your rights and freedoms.

5.4 Consent

We may rely on your consent for:

Non-essential cookies;
Promotional email marketing;
Personalized advertising, if introduced;
Publishing identifiable customer submissions;
Certain optional live chat or analytics functions; and
Other optional processing where consent is legally required.

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Cookies and Similar Technologies

Darkidox may use cookies, local storage, and similar technologies.

6.1 Essential Technologies

Essential cookies and similar technologies may be used to:

Keep products in your shopping cart;
Maintain checkout functionality;
Keep you logged in;
Remember security and privacy settings;
Prevent fraud;
Balance Website traffic; and
Maintain essential Website functions.

These technologies may be used without consent where they are strictly necessary to provide a service requested by the user or maintain essential Website functionality.

6.2 Optional Technologies

With any legally required consent, optional technologies may be used for:

Website analytics;
Performance measurement;
Advertising;
Retargeting;
Conversion tracking;
Marketing personalization;
Optional live chat functions; or
Other non-essential purposes.

Where consent is legally required, optional cookies and similar technologies will not be placed until you provide consent.

You may change or withdraw your cookie choices through the cookie settings made available on our Website.

You may also control cookies through your browser settings. However, disabling essential cookies may prevent the shopping cart, account, checkout, security, or other essential Website functions from operating correctly.

More detailed information about individual cookies, providers, purposes, and storage periods may be provided through our cookie settings or Cookie Policy.

7. Marketing Communications

We will send promotional emails only where we have an appropriate legal basis.

Where consent is required, promotional emails will be sent only after you actively choose to receive them.

You may unsubscribe at any time by:

Using the unsubscribe link included in a marketing email; or
Contacting support@darkidox.com.

Unsubscribing from marketing does not prevent us from sending necessary transactional or service-related messages, including:

Order confirmations;
Payment information;
Delivery updates;
Customer support responses;
Refund information;
Account security notices; and
Important legal or service notices.

We may retain a minimal suppression record to ensure that we continue to respect your marketing opt-out.

8. Automated Fraud Screening and Decision-Making

Our payment, fraud-prevention, hosting, or security providers may use automated systems to identify potentially fraudulent, unauthorized, or high-risk activity.

These systems may evaluate information such as:

IP address;
Device or browser information;
Billing information;
Payment risk indicators;
Order value;
Previous transaction activity; and
Unusual order behaviour.

An order may be delayed, declined, or referred for additional review based on fraud or security indicators.

Darkidox does not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects for customers.

Where applicable, you may contact support@darkidox.com to request further information or human review of a decision made by Darkidox.

Decisions made independently by a bank, payment card issuer, payment service provider, or other independent provider may be outside our control. You may need to contact the relevant provider directly regarding such a decision.

9. How We Share Personal Data

We do not sell personal data for money.

We share personal data only where reasonably necessary for the purposes described in this Privacy Policy.

9.1 Hosting and Website Operation

Our Website is hosted using Hostinger infrastructure.

WordPress and WooCommerce software process customer, account, cart, checkout, and order information within our hosting environment.

External providers receive personal data only where a connected feature, plugin, integration, or service requires it.

9.2 Live Chat and Customer Support

We use JivoChat to provide live customer support.

Information entered into the chat, together with related technical information, may be processed through JivoChat systems.

Email support information may be processed by our email hosting or delivery provider.

9.3 Payment Service Providers

When online payment options are available, we share only the transaction, contact, billing, and technical information reasonably necessary to process or support the payment with the payment service provider identified during checkout.

The specific provider used for a transaction will be shown before the customer submits payment.

Payment service providers may independently process personal data to:

Authorize payments;
Prevent fraud;
Comply with financial and legal obligations;
Issue refunds;
Handle reversals;
Investigate disputed payments; and
Respond to chargebacks.

Payment providers process personal data under their own privacy and security practices.

We will update this Privacy Policy if our payment arrangements materially change.

9.4 Banks, Payment Networks, and Fraud-Prevention Providers

Personal data may be shared with banks, payment networks, fraud-prevention services, and dispute-handling providers where necessary to:

Process a transaction;
Issue a refund;
Investigate unauthorized activity;
Prevent fraud;
Respond to a chargeback; or
Comply with financial or legal requirements.

9.5 Professional and Legal Recipients

We may disclose relevant personal data to:

Accountants;
Legal advisers;
Insurers;
Auditors;
Government authorities;
Regulators;
Courts; and
Law-enforcement authorities.

We do so only where reasonably necessary, legally required, or needed to establish, exercise, or defend legal claims.

9.6 Business Transfers

If Darkidox or its business assets are sold, reorganized, merged, or transferred, relevant personal data may be disclosed to professional advisers and a potential successor, subject to appropriate confidentiality and legal safeguards.

10. International Data Transfers

Some service providers may process personal data outside Lithuania or the European Economic Area (“EEA”).

Where personal data is transferred to a country that has not been recognized as providing an adequate level of data protection, we will rely on an appropriate legal transfer mechanism where required, such as:

A European Commission adequacy decision;
Standard Contractual Clauses approved by the European Commission;
Appropriate contractual, technical, and organizational safeguards; or
Another legally recognized transfer mechanism.

You may contact us to request additional information about safeguards applicable to a particular international transfer.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose or as required by applicable law.

Different retention periods may apply to different categories of personal data.

11.1 Orders and Accounting Records

Order, invoice, payment, transaction, and accounting records may generally be retained for 10 years or for another period required by applicable tax, accounting, or other law.

11.2 Delivery Evidence

Delivery records, screenshots, confirmations, relevant chat extracts, and other fulfilment evidence may generally be retained for up to 18 months after the order is completed.

If a refund, chargeback, complaint, fraud investigation, or legal dispute occurs, relevant information may be retained until the matter and any applicable legal claim period have ended.

11.3 Customer Support Communications

Customer support emails, exported chat records, and related attachments may generally be retained for up to 18 months after the request is resolved, unless longer retention is necessary for an unresolved dispute, legal obligation, fraud-prevention purpose, or legal claim.

Live chat history retained directly through JivoChat may also be subject to the functionality and retention settings of the applicable JivoChat service.

11.4 Customer Accounts

Account information may be retained while the account remains active and for a reasonable period after the last activity.

If an account is deleted, information that is not legally required may be deleted or anonymized.

Order, accounting, fraud-prevention, security, and dispute records may still be retained where legally necessary.

11.5 Technical and Security Logs

Technical, security, and server logs may generally be retained for up to 12 months, unless a security incident, fraud investigation, legal obligation, or technical issue requires longer retention.

11.6 Marketing Information

Marketing consent information may be retained until consent is withdrawn or the information is no longer required.

A minimal record of an unsubscribe request may be retained to prevent further marketing messages from being sent.

After the relevant retention period, personal data will be deleted, anonymized, or securely restricted unless continued retention is required or permitted by applicable law.

12. Security

We use reasonable technical and organizational measures designed to protect personal data, including, where appropriate:

Encrypted Website connections;
Access controls;
Password protection;
Software and security updates;
Restricted administrative access;
Backups;
Hosting security tools;
Fraud and abuse monitoring; and
Security logging.

No Website, email service, chat system, payment system, storage system, or internet transmission can be guaranteed to be completely secure.

You are responsible for keeping your email account, Darkidox account, payment information, game account, and device secure.

Never send us your game account password, complete payment card details, authentication code, backup code, or account recovery code.

13. Children and Minors

The Services are not intended for children under 14 to use independently.

Where the processing of personal data in connection with an information society service is based on consent, a child in Lithuania may generally provide their own consent from the age of 14. Where the child is under 14, consent or authorization from a parent or legal guardian may be required.

Customers who are under the age of legal majority in their country may use the Services only with the authorization and supervision of a parent or legal guardian where required by applicable law.

We do not knowingly enter into contracts directly with children who do not have the legal capacity to enter into those contracts.

Where we become aware that personal data was collected from a child without the required authorization or another lawful basis, we will take appropriate steps to delete or restrict that personal data.

A parent or legal guardian who believes that a child has provided personal data without the required authorization may contact support@darkidox.com.

14. Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

Request confirmation of whether we process your personal data;
Request access to your personal data;
Receive a copy of certain personal data;
Correct inaccurate or incomplete personal data;
Request deletion of personal data;
Restrict certain processing;
Object to processing based on legitimate interests;
Receive certain personal data in a structured, commonly used, and machine-readable format;
Request that certain personal data be transferred to another controller where technically feasible;
Withdraw consent at any time;
Object to direct marketing;
Request information about international transfer safeguards;
Request human review of certain automated decisions; and
Submit a complaint to a data protection authority.

These rights are not absolute.

For example, we may need to retain personal data to comply with accounting law, complete an order, investigate fraud, resolve a dispute, or establish, exercise, or defend a legal claim.

15. How to Exercise Your Rights

To submit a privacy request, email:

support@darkidox.com

Please state the type of request and provide enough information for us to locate the relevant records.

We may request reasonable verification to ensure that personal data is not disclosed, altered, or deleted at the request of an unauthorized person.

We will respond without undue delay and normally within one month where the GDPR applies.

For complex or numerous requests, this period may be extended where permitted by law. If an extension applies, we will inform you of the extension and the reason for it.

Requests are generally handled free of charge.

A reasonable fee may be charged, or a request may be refused, only where permitted by applicable law, including where a request is manifestly unfounded or excessive.

16. Complaints

If you have a privacy concern, please contact us first at support@darkidox.com so that we can investigate and attempt to resolve the matter.

You also have the right to lodge a complaint with the data protection authority in your country.

The Lithuanian supervisory authority is:

State Data Protection Inspectorate (VDAI)
Address: L. Sapiegos str. 17, LT-10312 Vilnius, Lithuania
Website: vdai.lrv.lt/en

You may also have the right to lodge a complaint with the supervisory authority in the European Union or European Economic Area country where you live, work, or believe an infringement occurred.

17. Third-Party Websites and Platforms

Our Website may contain links to third-party games, platforms, payment providers, social media pages, or other websites.

We do not control third-party websites and are not responsible for their separate privacy, security, or data processing practices.

You should review the privacy policy of a third-party service before providing personal data to it.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our technology, service providers, processing activities, or legal obligations change.

The updated version will be posted on this page with a revised “Last updated” date.

Where required by applicable law, we will provide additional notice or request new consent before materially changing how previously collected personal data is used.

19. Contact Us

For privacy questions, requests, or complaints, contact the data controller: