Privacy Policy
Last updated: 4 November 2026
This Privacy Policy explains how we collect, use, share and protect your personal data when you use gamixify.com, create an account or buy from us.
1. Who we are (data controller)
The controller of your personal data is Synncro Sp. z o.o., registered office ul. Grochowska 56, 04-282 Warsaw, Poland, office address 126/134 Marszałkowska Street, Office 246, 00-008 Warsaw, Poland, entered in the National Court Register (KRS) under number 1248580, NIP 1133205204. Gamixify (gamixify.com) is our trading name. In this policy, “we”, “us” and “our” mean Synncro Sp. z o.o.
For any data protection question or request, contact us at admin@gamixify.com, by phone at +48 500 657 471 (Monday to Friday, 10:00–18:00 UTC), or by post at either address above.
2. GDPR compliance
We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data, and Polish electronic communications law as regards cookies. We collect only the data we need for the purposes below, keep it only as long as necessary and protect it with appropriate technical and organisational measures.
3. Personal data we collect
- Order data: first and last name, email address, billing address (street, city, postcode, country), phone number if you give it, the products you buy, prices, currency, order number and order history.
- Account data (if you create an account): email address, name, password (stored only in hashed form) and account settings.
- Payment data: payment status, transaction reference, card brand and the results of fraud screening and 3-D Secure authentication, as reported by our payment service provider. We never receive your full card number or card security code (see section 7).
- Delivery data: the Keys issued to you, their platform and region, and delivery status.
- Consent records: your acceptance of our Terms, your request for immediate delivery of digital content, your confirmation that you are at least 18 years old (asked for every Order), each with the date and time and the IP address used.
- Support data: your messages, call notes and any screenshots you send us.
- Technical data: IP address, approximate location derived from it (country), browser and device type, login records and security logs.
4. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing your Order, taking payment and delivering your Key by email and in your account | Performance of a contract, Art. 6(1)(b) |
| Creating and managing your account | Performance of a contract, Art. 6(1)(b) |
| Handling complaints, withdrawals, refunds and faulty Keys | Performance of a contract and legal obligations under consumer law, Art. 6(1)(b) and (c) |
| Preventing card fraud, carrying out 3-D Secure authentication and handling chargebacks | Legal obligations, Art. 6(1)(c), and our legitimate interest in preventing fraud, Art. 6(1)(f) |
| Blocking sales to sanctioned countries and persons (country check based on IP address and billing country) | Legal obligations under EU sanctions law, Art. 6(1)(c) |
| Keeping accounting and tax records | Legal obligation, Art. 6(1)(c) |
| Answering your questions by email or phone | Performance of a contract, Art. 6(1)(b), or our legitimate interest in answering enquiries, Art. 6(1)(f) |
| Keeping the website secure (security logs) | Our legitimate interest, Art. 6(1)(f) |
| Establishing, exercising or defending legal claims | Our legitimate interest, Art. 6(1)(f) |
Your name, email address and billing address are required to conclude and perform the contract and to process the card payment (the payment provider uses the billing address for fraud prevention). Without them we cannot process your Order.
5. Who receives your data
We share personal data only where necessary, and only with:
- Payneteasy, our payment service provider: card payment processing, 3-D Secure authentication, fraud screening, refunds and chargebacks.
- The acquiring bank, the card schemes (Visa, Mastercard) and your card issuer: payment authorisation, 3-D Secure, refunds and chargebacks.
- Hostinger, our hosting provider: hosting of the website, its database and our mailboxes on servers in Vilnius, Lithuania (EU).
- Our game key suppliers: only the order details needed to supply your Key or to check a Key you report as faulty.
- Our accounting, tax and legal advisers, who are bound by confidentiality.
- Public authorities, courts and law enforcement, where we are legally obliged to disclose data or where it is needed to defend legal claims.
- Content delivery services: product images are loaded from the Steam image service (cdn.cloudflare.steamstatic.com, operated by Valve Corporation through Cloudflare, Inc.) and emoji images from WordPress.org (s.w.org). When a page loads, these services receive your IP address and browser information.
Our service providers process data on our behalf under data processing agreements (Art. 28 GDPR), or act as independent controllers under their own privacy notices (card schemes, banks, authorities). We do not sell personal data.
6. Transfers outside the European Economic Area (EEA)
Our website and database are hosted in the EU (Vilnius, Lithuania). Some recipients listed in section 5, or their sub-processors, may process data outside the EEA, in particular in the United States (Valve Corporation and Cloudflare, Inc. for product images, and WordPress.org for emoji images). We transfer personal data outside the EEA only where:
- the European Commission has decided that the destination country ensures an adequate level of protection, including the EU-US Data Privacy Framework for certified US companies; or
- we have concluded the European Commission’s Standard Contractual Clauses (Decision (EU) 2021/914), with supplementary measures where necessary.
You can ask for a copy of the relevant safeguards at admin@gamixify.com.
7. Payment security and card data
All card payments on gamixify.com are processed by our payment service provider Payneteasy, which complies with the Payment Card Industry Data Security Standard (PCI DSS). When you pay, you are taken to Payneteasy’s secure payment page and enter your card details there, not on gamixify.com.
We never see, receive or store your card data: not your full card number, card security code (CVV2/CVC2), expiry date or PIN. We receive from Payneteasy only the payment status, transaction reference, card brand and the results of fraud screening and authentication. We do not store cards for future payments and we do not charge cards on a recurring basis.
Your card issuer may ask you to confirm the payment with 3-D Secure (Visa Secure or Mastercard Identity Check), for example in your banking app or with a one-time code. The data needed for 3-D Secure is processed by Payneteasy, the card schemes and your card issuer.
8. How we protect your data
- All traffic to and from gamixify.com is encrypted with HTTPS (TLS).
- Passwords are stored only as salted hashes.
- Access to customer data is limited to authorised staff with individual accounts.
- We keep the website software and plugins up to date with security updates.
- Our hosting provider protects the servers with a firewall and malware scanning.
- We have data processing agreements with our service providers.
- If a personal data breach occurs, we notify the supervisory authority within 72 hours where required (Art. 33 GDPR) and inform affected customers where required (Art. 34 GDPR).
9. How long we keep your data
- Account data: while your account is open. When you close your account, we delete or anonymise it without undue delay, except data we must keep under the points below.
- Orders and accounting records: 5 years from the end of the calendar year in which the related tax obligation arose, as required by Polish tax and accounting law.
- Payment, fraud-prevention and chargeback records: for as long as a payment can be disputed under card scheme rules and, where a dispute or claim is open, until it is closed.
- Complaints and support correspondence: until the limitation period for claims relating to the matter expires.
- Consent records: for as long as the consent applies and then until the limitation period for related claims expires.
- Security logs: for a limited period needed to protect the website, after which they are deleted automatically.
- Cookies: as listed in our Cookie Policy.
10. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- have it rectified (Art. 16);
- have it erased (Art. 17);
- restrict its processing (Art. 18);
- data portability (Art. 20);
- object to processing based on our legitimate interests (Art. 21);
- not be subject to a decision based solely on automated processing that significantly affects you (Art. 22);
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, email admin@gamixify.com or write to us at the address in section 1. We may ask you to confirm your identity. We reply within one month; where a request is complex, we may extend this by up to two further months and will tell you why.
You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl, or with the data protection authority in the EU country where you live or work.
11. Cookies
We use only strictly necessary cookies and similar browser storage. They run the cart and checkout, remember your selected currency, keep you signed in and store your cookie choices. We do not use analytics, advertising or order-attribution tracking cookies.
| Category | Purpose | Examples | Consent |
|---|---|---|---|
| Strictly necessary | Cart, checkout, currency selection, sign-in, security | wp_woocommerce_session_[hash], woocommerce_cart_hash, PHPSESSID, wordpress_logged_in_[hash] | Not required |
| Analytics | Not used | None | Would be required |
| Marketing | Not used | None | Would be required |
The full list with every cookie’s name, purpose and expiry is in our Cookie Policy.
12. Automated checks
Orders go through automated fraud and payment-risk checks, which may delay an Order until a member of our staff reviews it. You can ask for human review and contest the outcome at admin@gamixify.com.
13. Age
Our store is for adults only. You must be at least 18 years old to create an account or place an order, and we confirm this at checkout. Our store is not directed at anyone under 18 and we do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has given us personal data, contact us at admin@gamixify.com and we will delete it.
14. Changes to this policy
We publish any change to this policy on this page with a new “Last updated” date, and inform account holders by email of significant changes.