Privacy Policy

Controller within the meaning of the GDPR:

Contact: contact@lazarus-platform.de

A) Creator Data – provided directly upon registration:

• Email address – for account management, security notifications, and automated access block notices
• Username – for the creator panel
• Password (hashed) – for authentication

B) End-User Data – generated automatically during license activation, processed on behalf of the respective creator:

• License key – for validation and activation
• Hardware ID (HWID / Hash) – anonymised device fingerprint
• CPU identifier – hardware component fingerprint for abuse detection
• Motherboard identifier – hardware component fingerprint for abuse detection
• Activation timestamps – for logging and security purposes

C) Technical / Server Data – generated automatically by the server:

• IP address – logged for security, rate limiting, and abuse prevention
• Request logs – request time, endpoint, and result, retained for up to 90 days unless required longer for security investigations

• Providing and managing plugin licenses
• Detection and prevention of license abuse
• Automated blocking of devices detected as abusive
• Authentication in the creator panel
• Communication regarding security-relevant events and access blocks
• Administration of creator accounts and plugin products by platform operators

• Art. 6(1)(b) GDPR – performance of a contract: creator accounts, license management
• Art. 6(1)(f) GDPR – legitimate interest: hardware fingerprinting (HWID, CPU, board), IP logging, abuse detection, and platform security. The legitimate interest lies in preventing license abuse, ensuring platform integrity, and protecting creators from unauthorised distribution.
• Art. 28 GDPR – data processing on behalf of creators: end-user activation data is processed by Vertalyn Platform as a processor on behalf of the respective creator as controller.

Data is only retained for as long as necessary for the respective purposes or as required by statutory retention obligations. Hardware IDs, CPU identifiers, and motherboard identifiers of blocked devices are retained until manually removed by an administrator. Upon deletion of a creator account, all associated products, licenses, and activation records are permanently deleted.

Personal data is generally not disclosed to third parties, with the following exception:

• Jinxxy – License keys issued via Jinxxy are validated against the Jinxxy API to confirm authenticity. No payment data is processed by Vertalyn Platform — all transactions occur exclusively within Jinxxy's own platform. Only the license key string is transmitted for validation purposes. Jinxxy's privacy policy applies to data processed on their end.
• Hosting – This platform is hosted on servers located within the European Union. No data is transferred to third countries.

Under GDPR you have the following rights:

• Access – Art. 15 GDPR
• Rectification – Art. 16 GDPR
• Erasure – Art. 17 GDPR
• Restriction of processing – Art. 18 GDPR
• Objection – Art. 21 GDPR
• Complaint – You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

To exercise your rights, please contact us by email: contact@lazarus-platform.de

The platform uses only technically necessary session cookies for authentication in the creator panel. No tracking or advertising cookies are used.

Vertalyn Platform operates as a license management and secure delivery infrastructure. It does not develop, audit, or take responsibility for the content of plugins distributed through the platform.

Plugin code is solely the responsibility of the respective creator who uploaded it. Vertalyn Platform makes no warranties regarding the functionality, safety, or suitability of any plugin for any particular purpose.

Due to the nature of Python-based plugins, the platform does not perform automated code audits, security reviews, or runtime sandboxing of plugin source code. Users install and execute plugins entirely at their own risk.

What Vertalyn Platform does guarantee is the integrity of file delivery:

• Files are stored on the server and delivered only to verified, authenticated users
• Each file transfer is secured via HMAC-signed time-limited tokens
• File integrity is verified via SHA-256 hashing at delivery time
• Access is restricted to activated, non-blocked license holders only
• Unauthorised access attempts are logged and blocked automatically

Creator configuration is solely the creator's responsibility. To the extent permitted by applicable law, Vertalyn Platform shall not be liable for damages arising from incorrect plugin configuration by creators, including but not limited to: incorrect device limits, incorrect tier assignment (e.g. core functionality uploaded as trial), incorrect pricing, missing features, or unintended access restrictions. End users affected by such misconfiguration must contact the respective creator directly.

To the extent permitted by applicable law, Vertalyn Platform shall not be liable for any damages, data loss, or harm resulting from the execution of plugin code provided by creators. By using this platform, users acknowledge that they have reviewed and accepted the content of any plugin prior to use.

The platform operator reserves the right to block or delete creator accounts and their associated products at any time, without prior notice, in cases of policy violations, abuse, or inactivity. Affected creators will be notified by email where possible.

End-user devices (HWIDs) may be blocked automatically by the platform's abuse detection system, or manually by a platform administrator, if license abuse is detected. Automated blocks are triggered by anomalies such as cross-license device sharing, burst activation patterns, or fingerprint reuse across multiple licenses.

Blocked devices are stored with their associated CPU and motherboard identifiers to prevent circumvention. Blocks may be lifted manually by an administrator upon legitimate request via contact@lazarus-platform.de.