Privacy Policy
GDPR & PRIVACY1. Data Controller
The data controller is Lovykey (lovykey.com). Rights may be exercised by contacting privacy@lovykey.com or supporto@lovykey.com.
2. Personal Data Processed
For account registration, email, first name, last name, and encrypted password are processed. For invoicing and order fulfillment, billing address, postal code, city, country, and optional phone number are processed. For mobile game top-ups, the Player ID / Server ID entered by the customer is recorded. For fraud prevention (Stripe Radar) and security, IP addresses are processed with mandatory 3D Secure 2 authentication.
3. Purposes and Legal Basis for Processing
Data is processed to perform the distance sales contract (art. 6.1.b GDPR), comply with statutory tax and fiscal obligations including 22% VAT (art. 6.1.c GDPR), and pursue legitimate interests in preventing carding fraud and chargebacks (art. 6.1.f GDPR). Technical cookies keep your session and cart active. Invasive advertising and marketing trackers are disabled.
4. Data Security & Encryption
PCI-DSS COMPLIANTAll communications between your browser and Lovykey are secured using high-grade HTTPS/TLS encryption. Passwords and credentials are stored using one-way cryptographic hashing.
Payment processing elements are loaded directly via Stripe Elements from https://js.stripe.com. Lovykey does not store or have access to full credit card numbers or security codes.
5. Recipients and Data Transfers
Account and transaction data reside on secure dedicated VPS servers located in the European Union. Payment credentials (card numbers, CVC) are handled exclusively by Stripe's certified PCI-DSS Level 1 infrastructure.
To fulfill orders, minimal technical data (Player ID for MooGold, license region for CodesWholesale) are transmitted securely to our wholesale fulfillment partners.
6. Data Retention Periods
Customer account data are retained until deletion is requested. Fiscal and transaction records are retained for ten (10) years in compliance with civil and tax statutory retention requirements. Technical cookies expire according to our cookie schedule.
7. Cookie Policy & Tracking
SOLO TECNICILovykey uses only strictly necessary technical cookies to enable user login sessions and cart management. No third-party profiling or advertising retargeting cookies are used.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| _medusa_jwt | Keeps the sign-in session. | 7 days | Technical, not readable by page scripts |
| _medusa_cart_id | Keeps the cart. | 7 days | Technical, not readable by page scripts |
| _medusa_cache_id | Separates the storefront cache copy. | 1 day | Technical |
| _medusa_pending_customer | Keeps signup data until the email is verified. | 1 day | Technical, not readable by page scripts |
| cc_cookie | Remembers that this explanation was read. | 182 days | Technical |
8. Data Subject Rights & Complaints
Pursuant to articles 15-22 of the GDPR, you have the right to request access, rectification, erasure, restriction, and portability of your data by writing to privacy@lovykey.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante Privacy) if you consider that your rights have been violated.