Privacy Policy
1. Who we are
BotLobbies (Siplifi Group Ltd) provides matchmaking VPN and Geo Fence software. For the purposes of UK data-protection law we are the data controller for the personal data described below. Company number: 12481320. Registered address: 71-75 Shelton Street, London, WC2H 9JQ.
2. What we collect
- Account data — the email address you sign up with, and your subscription and order history.
- Billing data — your name, billing address and country, and the payment-method token created by our payment processor. We never see or store your full card number.
- Technical data — IP address, device/browser type and basic request logs, used for security, fraud prevention and to keep the service running. When you place an order we record on it the IP address and browser you checked out from, and a random device ID (see Cookies). When the desktop app checks its licence, we log the time, your IP address, the licence key and the app making the check.
We do not read, monitor or store the contents of your game traffic, and our software never modifies game files.
3. How we use it
To create and manage your account, provide and renew your subscription, deliver the desktop app and any licence keys, take payment, provide support, prevent abuse, and meet our legal obligations. Our lawful bases are performance of our contract with you, your consent (where asked, e.g. analytics cookies) and our legitimate interests in securing the service, preventing fraud and responding to payment disputes.
4. Payments
Payments are processed by Stripe and, where offered, PayPal. They receive the billing information needed to take payment and act as independent controllers for that processing under their own privacy policies. Card details are entered directly into the processor's secure fields and are never transmitted to or stored on our servers.
5. Cookies
We use a small number of strictly-necessary cookies to keep your cart and sign-in working (these need no consent). With your consent we also use Google Analytics to understand how the site is used, including the pages viewed and the buttons and links pressed. If you accepted and then buy, our server also tells Google Analytics about the purchase (the order number, products, amounts and any coupon) with your Analytics ID, so the sale is counted once even if you close the page; nothing is sent for a buyer who didn't accept. It loads only after you accept the cookie banner, in line with UK PECR: before that it doesn't run or set cookies. You can withdraw consent at any time with “Cookie preferences” at the bottom of every page.
To see where people get stuck on the way to buying, we also count steps through the shop for every visitor: a page viewed, the plans seen, a plan added to the cart, the checkout reached, a Pay button pressed, and a checkout error and its type. Each count holds only the step, the page's path (with any order or ticket number taken out), the plan or payment type, phone or desktop, the country (worked out from your IP address, which isn't kept with it) and the hour it happened. No cookies are read or set for it, nothing is stored on your device, and nothing identifies you or links one count to another. The counts are deleted after 35 days.
When you place an order we also set bl_did, a random device ID that contains no personal details. It lets us recognise repeat orders from the same device, which we use only to prevent fraud and to evidence a payment if it is disputed. It lasts up to 13 months and is never used for advertising or to follow you on other sites.
6. Retention
We keep account and order records (including the IP address, browser and device ID recorded on an order) for as long as you have an account and for the period we are legally required to retain financial records. Licence-check logs are kept for 13 months, which covers the time in which a card payment can be disputed. Other technical logs are kept only as long as needed for security. You can ask us to delete your account data at any time (subject to those legal retention obligations).
7. Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or port your data, and to object to certain processing. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Contact
Questions about this policy or your data? Email [email protected].