Last updated: 6 October 2026. This page is provided in English.
We keep as little as the service needs. We never see your Eldorado password or session. We do not sell data and we do not use third-party advertising or analytics trackers.
The Voltstrike application runs on your own computer and signs in to Eldorado.gg there, in a browser window on your machine. Your Eldorado credentials and session stay on your computer. The application sends us only its status — whether it is running and connected, its version, how many requests it saw and offers it sent, and the orders it won with their amounts — and fetches your settings from us. We use this to run your subscription, to support you and to find faults.
To see how the website is used we record page views with a salted one-way hash of the IP address and browser signature (the raw IP is not stored), an approximate country, the page visited and the referring site. While a page is open we also record short activity signals (to count current visitors), how far the introduction video is watched, and when the checkout page is opened or closed. If you create an account from the same browser, these records are linked to your account. No cookie or other identifier is placed on your device for this. The data stays on our own server and is not shared with anyone.
We use only strictly necessary cookies: one to keep you signed in and one to protect forms (CSRF). Your language choice and the support chat you opened are remembered in your browser's local storage so they work when you come back. There are no advertising, analytics or tracking cookies, so no cookie consent banner is needed.
To keep the service safe we keep short-lived security records: rate-limit counters, failed sign-in attempts, and — when someone abuses the support chat — a block entry linked to their account and a one-way hash of their IP address. Linked computers are identified by a hardware-derived fingerprint so a licence cannot be copied to other machines. These records are used only to protect the service and its users.
Payments are processed by Stripe. Stripe's own privacy policy applies to the data you enter on its checkout page. We receive the subscription status and a customer reference, not your card number.
We share data only with the providers needed to run the service, each acting on our instructions: Hetzner (our server, in Germany), Cloudflare (network and security provider that carries all website traffic and forwards e-mail sent to our support address), Stripe (payments), Google (only if you choose Google sign-in) and an IP-to-country lookup service that receives the IP address alone. We do not sell or rent personal data.
Some of these providers (Stripe, Google, Cloudflare) may process data outside the UK and the EEA. Where they do, the transfer is covered by an adequacy decision, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
To provide the service you signed up for — your account, subscription, settings and the application (contract). To keep the service secure, prevent abuse and fraud, answer support requests and understand how the website is used (our legitimate interests, which we balance against your rights). To keep payment and accounting records (legal obligation). Google sign-in is only used if you choose it.
Account data is kept while your account exists. Visit statistics are deleted after 400 days. Database backups are kept for 14 days. You can ask us to delete your account and all data at any time through the support chat; we delete it within 30 days, except records we must keep for accounting.
You can ask for a copy of the data we hold about you, ask us to correct or delete it, object to or ask us to restrict how we use it, or ask for it in a portable format. Contact us through the support chat on the website or in the app, or e-mail [email protected]; we reply within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live. The data controller is SHISHITOREN LTD, a company registered in England and Wales (company number 16707572), registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
If this policy changes in a way that matters, we announce it on the website or by email before it takes effect.