PRIVACY POLICY
Effective date: 24 February 2026
Last updated: 4 October 2026
The short version
- We never sell, rent or trade your personal data, and we never will.
- We only use your data to run this website and our store — and, if you join our mailing list, to send you news about our games.
- No ads, no analytics, no tracking pixels, no social-media trackers, no profiling.
- Your card details never reach us: payments are handled by the payment providers.
- You can ask us at any time what we hold about you, or to delete it.
1. Who We Are
This website is operated by Melderon d.o.o., Zadolje 2, 1610 Ribnica, Slovenia (tax number SI33794057), which runs the MegaVision Software label. For the purposes of the EU General Data Protection Regulation (GDPR), Melderon d.o.o. is the data controller.
Contact for anything privacy-related: support@megavision-software.com or our contact form.
2. What We Store, Why, and for How Long
We only collect what you give us when you use a feature, plus the minimum needed to keep the site secure. Here is everything:
| When | What we store | Why | How long |
|---|---|---|---|
| You send a message through the contact form | Name, email address, message | To answer you. The message is emailed to us and is not stored in our website database. | In our mailbox only as long as needed to deal with your request |
| You create an account | Name, email address, password (stored only as a one-way hash — we can never see it); while you confirm your email, these wait in a pending sign-up | So you can log in and see your orders and downloads | Pending sign-ups: max. 24 hours. Accounts: until you ask us to delete yours |
| You buy something in our store | Name, email, billing address and country, company name (business customers), the products, prices, VAT, discount code used, payment method, the payment provider's transaction reference, invoice number | To deliver your order, issue invoices and meet our accounting and tax obligations | As long as Slovenian accounting and tax law requires (for invoices, currently 10 years) |
| You download a purchased game | Your personal download links, how often each was used and when it expires | To deliver the files and limit each link to 3 downloads within 7 days (you can always get a fresh link from your account) | Together with the order |
| You redeem an unlock code | The code, your email address, your IP address and the time | To deliver the product and to detect abuse of codes | IP address: deleted after 6 months. The rest: together with the order |
| You join the mailing list | Email address, status (awaiting confirmation / subscribed / unsubscribed), where you signed up, sign-up and confirmation dates | To send news about our games and projects, and run occasional raffles (see below) | Until you unsubscribe or ask us to delete it. Unconfirmed sign-ups: max. 30 days |
| Anyone logs in or signs up | A count of failed login and sign-up attempts per IP address and per email address, stored only as one-way hashes | To protect accounts against password guessing and our forms against spam | 15 minutes to 1 hour; the records are deleted within a day |
| Anyone visits the website | Standard web server logs kept by our hosting provider (IP address, date and time, page requested, browser type) | To operate the website and keep it secure | A limited period, according to our hosting provider's log rotation |
3. What We Never Do
- Sell, rent, trade or give away your personal data
- Use your data for advertising, or show ads
- Use analytics, tracking pixels or social-media trackers
- Build profiles of you or make automated decisions about you
- Store your payment card details
4. Payments
Card payments are processed by the Activa eway2pay payment gateway. You enter your card details on the gateway's secure payment page, not on our website; we only receive whether the payment succeeded and a transaction reference.
PayPal payments are made on PayPal's own website. PayPal tells us whether the payment was completed and gives us a transaction reference.
Both providers process your payment under their own privacy policies.
5. Who Else Handles Your Data
We only share data with the service providers we need to run the website and store, and only as much as each one needs:
- Our hosting provider — stores the website and its database on servers in the EU
- Our email provider — delivers our emails (order confirmations, download links, account and mailing-list emails)
- Payment providers — Activa eway2pay and PayPal, as described above
We may also disclose data where the law requires it, for example to tax authorities.
6. Cookies & Local Storage
We use one cookie for visitors, and a few settings saved only in your own browser:
| Type | Name | Purpose | Duration |
|---|---|---|---|
| Cookie | PHPSESSID | Session cookie. Keeps you logged in, protects our forms against forgery and spam (security token, contact-form check) and remembers your checkout in progress. Strictly necessary. | Until you close your browser |
| Cookie | MV_ADMIN | Only for our staff when they log in to manage the website. Strictly necessary. | Until the browser is closed |
| localStorage | mv-site-theme | Your chosen colour theme (paper, arcade or phosphor). | Until you clear it |
| localStorage | neonbyte-anim | Whether the background animation is switched on. | Until you clear it |
| localStorage | mv-cart | Your shopping cart (products and quantities). Sent to us only when you go to checkout. | Until you clear it or complete your order |
| localStorage | mv-newsletter-seen | Remembers that the mailing-list invitation was already shown, so it never appears again. | Until you clear it |
localStorage stays in your browser and is not sent to us (except the cart, as described). We use no advertising, analytics or third-party cookies. Everything above is either strictly necessary or a setting you chose, so no cookie banner is needed.
7. Third-Party Services & Links
Everything on our pages — including the fonts — is loaded from our own server. Your browser does not contact Google, social networks or any other third party when you browse this website.
Links to other sites (for example Steam, GOG, YouTube, Patreon or social media) are plain links: nothing from those sites is embedded in our pages, so they receive nothing about you unless you click through. Once you do, their own privacy policies apply.
8. Legal Basis for Processing (GDPR)
- Contract (Article 6(1)(b)) — your account, orders, downloads and code redemptions
- Legal obligation (Article 6(1)(c)) — keeping invoices and order records for accounting and tax purposes
- Consent (Article 6(1)(a)) — the mailing list and raffles; you can withdraw it at any time by unsubscribing
- Legitimate interest (Article 6(1)(f)) — answering contact-form messages, keeping the website secure, and preventing fraud and spam
9. How We Protect Your Data
- The whole website uses encrypted HTTPS connections
- Passwords and security tokens are stored only as one-way hashes
- Payment card data never touches our servers
- Only authorised staff can access the admin area, and failed login attempts are limited
No system is 100% secure, but we take reasonable technical and organisational measures to protect your data.
10. Your Rights (GDPR)
You have the right to:
- Access — get a copy of the data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted (except what we must keep by law, such as invoices)
- Restriction — ask us to limit how we use your data
- Data portability — receive your data in a structured, machine-readable format
- Object — to processing based on legitimate interest
- Withdraw consent — for example by unsubscribing from the mailing list, at any time
- Complain — to the Information Commissioner of the Republic of Slovenia (www.ip-rs.si) or the data protection authority in your country
To use any of these rights, write to support@megavision-software.com. We will answer within one month.
11. Children
This website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.
12. Changes to This Policy
If we change how we handle data, we will update this page and its “Last updated” date. For significant changes affecting mailing-list subscribers or customers, we will also let them know by email.
13. Contact
Melderon d.o.o. — MegaVision Software
Zadolje 2, 1610 Ribnica, Slovenia
support@megavision-software.com · contact form