Last updated: September 4, 2026

The party responsible for the processing of personal data is leoworks, sole proprietor Sven Radtke, Bachstraße 96, 22083 Hamburg, Germany, email leoradtke@outlook.de. TARF Tweaks is a product of leoworks.

What Data TARF Tweaks Processes

When using TARF Tweaks, personal, technical, and account-related data may be processed and stored.

Depending on use, this includes in particular the IP address, HWID or other device identifiers, Discord account ID, Discord username (if linked), email address, license key or license ID, purchased product, activation status, time of first activation or use, device binding, login timestamps, failed login attempts, software version, operating system and device information, and technical security and authentication logs.

For orders, we additionally process the data required for contract processing, such as email address, product, order number, purchase price, payment status, Stripe customer or payment identifier, and the time of the order.

We do not store more data than is necessary for the respective purpose.

Why This Data Is Processed

Processing takes place in particular to provide TARF Tweaks accounts and licenses, verify valid license keys, implement device bindings, detect and prevent key sharing, detect fraud and abuse, protect our infrastructure, handle support requests, and to be able to prove whether and when a product or license key was activated or used.

Where this processing is necessary for the delivery of a purchased product, it is carried out in particular on the basis of Art. 6(1)(b) GDPR. Security, fraud, and abuse prevention may be carried out on the basis of legitimate interests under Art. 6(1)(f) GDPR. Legally required processing, for example in connection with accounting and taxes, is carried out on the basis of Art. 6(1)(c) GDPR.

Our Own TARF Auth System

TARF Tweaks operates its own authentication and licensing system.

When you sign in or use a license key, the system may link your license to your device or HWID and log activation and login events. In doing so, the IP address and other technical data necessary for security and authentication may also be stored.

This data helps in particular to detect unauthorized key sharing, protect accounts and license keys from abuse, and, in support, refund, or payment disputes, to determine whether and when a license was used.

Discord

TARF Tweaks may link Discord accounts to TARF accounts or licenses.

This may involve storing, among other things, the Discord account ID, Discord username, link status, and information required for authentication, role assignment, license verification, fraud prevention, or support.

Discord separately processes data under its own responsibility, in accordance with Discord's own privacy policy.

Stripe

TARF Tweaks uses Stripe for payment processing.

As part of a payment, Stripe processes, among other things, payment, transaction, contact, device, and security information. Stripe names, for example, name, email address, order information, IP address, device ID, and payment data as data that may be processed.

TARF Tweaks receives the information necessary for contract processing regarding the transaction and payment status. Complete card data is processed by Stripe as part of its standard payment processing.

Stripe also provides a Data Processing Agreement for business customers and documents mechanisms for international data transfers.

Email and Key Delivery (Resend)

For transactional email delivery, in particular sending order confirmations, invoices, and license keys, TARF Tweaks uses the service provider Resend (Resend, Inc., USA).

This involves processing the data required for delivery, in particular the email address as well as the subject and content of the respective message, such as order information and the license key, along with technical delivery and security information.

Resend acts as a processor on the basis of a data processing agreement. As Resend is based in the USA, this may involve a transfer of personal data to the USA. Such transfers are safeguarded on the basis of the EU Standard Contractual Clauses and, where applicable, additional protective measures.

Website and Cloudflare

tarftweaks.com is currently provided via Cloudflare Pages. When visiting the site, Cloudflare processes technically necessary connection and security data such as IP address, time of access, browser, device, and system information, as well as HTTP and security information.

No analytics or advertising trackers are currently in use.

Should Google Analytics, Meta Pixel, TikTok Pixel, or comparable tracking systems be added later, this Privacy Policy will be updated accordingly and a consent system will be implemented where required.

Contact

When contacted via email, Discord, or support systems, TARF Tweaks processes the contact and message information provided, to the extent necessary to handle the request.

Outlook / Microsoft is currently used for email communication.

Retention Period

Personal data is generally stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Order and invoice information may be stored longer due to statutory retention obligations. License, device, and activation information may be stored for the duration of the license and beyond, to the extent necessary for license management, security, abuse prevention, or the assertion or defense of legal claims.

Data that is no longer needed is deleted or anonymized, unless statutory obligations prevent deletion.

Your Rights

Under the GDPR, you have in particular the rights to access, rectification, erasure, restriction of processing, data portability, and objection.

Requests can be directed to leoradtke@outlook.de.

You also have the right to lodge a complaint with a data protection supervisory authority. For the controller in Hamburg, the Hamburg Commissioner for Data Protection and Freedom of Information is generally responsible.

Changes

This Privacy Policy may be updated if TARF Tweaks, the website, the authentication system, payment providers, hosting, data processing, or the services offered change.