Privacy Notice

1. Operator and scope

HellbornVisuals operates the Omen website and software. Contact us at support@hellbornvisuals.com with privacy questions. This notice covers information collected directly by Omen. If you open a separate streaming service, its own privacy policy governs that service.

2. Information we process

• Account and requests: the email address you submit, verification-challenge records, an optional Discord name on access requests, account ID, Player ID, and access status. If you use an available Google or Discord sign-in option, we receive the verified email address returned by that provider; we do not receive your provider password.
• Device and security: a SHA-256-derived identifier tied to the Windows installation for one-PC licensing, device-link and unlink events, session-token hashes, rate-limit identifiers derived from email and IP address, and access/security events. We do not need your raw Windows identifier in the account database.
• Purchases: plan, subscription status, renewal and paid-through dates, checkout and Stripe customer identifiers, purchase consent records, renewal-notice status, and support correspondence. Stripe processes card and wallet payment details; Omen does not receive full card numbers.
• App settings on your PC: display, crosshair, resolution preset, hotkey, background media, audio, and music preferences stored locally. Imported offline music and background files are copied into Omen's local data folder. We do not upload your local music or personal background files as part of ordinary use.
• Website and delivery data: ordinary requests to our hosting and API providers may include IP address, browser/device information, request times, and diagnostic logs. The scrolling background video is delivered from an external CloudFront URL, whose operator may receive your request metadata.

3. Why we use it

We use information to send and verify sign-in codes; create and secure accounts; bind and manage licensed devices; provide free or paid access; deliver receipts and service or renewal notices; support customers; detect misuse; and troubleshoot reliability. We do not use your imported local media for advertising.

4. Service providers and third parties

Cloudflare hosts the licensing API and associated database. Stripe handles checkout and billing when enabled. Resend delivers transactional email. Google or Discord may verify an account email if you choose one of those sign-in methods after it is configured. The website's video uses CloudFront delivery. Omen can display YouTube Music, Spotify, Pandora, and SoundCloud through Microsoft WebView2, or open them in your browser. Those providers may collect information under their own policies, especially if you sign in to them. We share only what is needed for the service you use, a legal requirement, or security and support.

We do not operate a cross-site advertising network or intentionally sell account information. This statement should be rechecked if analytics, ads, or new integrations are added.

5. Storage and retention

Account and licensing records are kept while needed to provide access, meet transaction obligations, resolve disputes, or protect against abuse. Sign-in codes expire after 10 minutes; browser sessions are configured to expire after 30 days, though related security records may remain longer. Payment and consent records may need to be retained for accounting and legal obligations. Local app settings and imported files remain on your PC until you remove them. We have not finalized fixed deletion periods for every server record; contact support to request review or deletion where permitted by law.

6. Your choices and requests

You can choose email-code sign-in instead of a social sign-in, avoid embedded music providers, remove imported local media, and turn off optional startup or close-to-tray behavior. Account users can sign out, manage the linked PC, and manage a subscription when those features are available. To request access, correction, or deletion of personal information, email support@hellbornvisuals.com from the account email. We may need to verify ownership and keep records required for billing, fraud prevention, or law. Rights vary by location; we will honor applicable non-waivable rights.

7. Cookies, Do Not Track, and Global Privacy Control

The account API uses a Secure, HttpOnly, SameSite=Strict session cookie for browser sign-in. The public site does not currently use cross-site behavioral-advertising scripts. Browser Do Not Track and Global Privacy Control signals do not currently change this site's behavior because we are not using the site for cross-context behavioral advertising. Third-party video or embedded music providers may have their own tracking practices; see their notices.

8. Security and age

We use one-time codes, hashed credentials or device identifiers, access limits, and encrypted transport. No system is perfectly secure; never share a sign-in code or secret key. Omen is not directed to children under 13. If you believe a child submitted personal information, contact support.

9. Changes to this notice

We will update the effective date when this notice changes and post material changes on this page. Where appropriate, we will also use the account email to provide notice.

10. Contact

Write to support@hellbornvisuals.com for privacy questions or requests. Please do not send full payment-card information or one-time codes.