Privacy Policy
Last updated: 2 November 2026
1. Who we are
metammo.com is run by METAMMO LTD, a company registered in England and Wales (company number 17537562), registered office 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom. METAMMO LTD is the data controller for the personal data described in this policy.
- Privacy questions and requests: [email protected]
- ICO registration number: registration pending
- Representative in the European Union (Article 27 EU GDPR): appointment pending
2. What we collect
- Account data: if you create a METAMMO account, your e-mail address and, depending on how you sign in, your Discord user ID and display name or your Google account ID. We never see your Discord or Google password.
- Order data: order number, the game and account you bought, price, payment method, date, warranty and delivery records.
- Login details of the account you bought: if our manager stores them for you, the login details of the purchased game account, kept encrypted so that only you can display them in your account. You can remove them at any time.
- Support communications: messages you send us in Discord tickets or by e-mail.
- Reviews: the rating, text and first name you choose to give when you review an order.
- Security data: sign-in history, the devices signed in to your account (browser and operating system), and a one-way hash of your IP address used to stop abuse.
- Usage data: pages visited, referring page and browser type, counted by our own statistics without cookies (nothing is stored on your device unless you accept analytics); and, only if you accept, Google Analytics data (see section 9).
Payment data: payments are processed by our payment providers (section 5). We receive only the confirmation that you paid, the amount and the payer name or e-mail the provider shares; we never receive or store card numbers or card security codes. We do not collect special category data. Purchases are for adults only (18+, see our Terms) and we do not knowingly collect data from children.
3. Where the data comes from
From you (orders, tickets, e-mails, reviews), from Discord or Google when you choose to sign in with them, and from payment providers, which confirm that a payment was made.
4. Why we use it and our lawful basis
| Purpose | Lawful basis (UK / EU GDPR) |
|---|---|
| Selling and delivering the account, handover, warranty and support | Contract |
| Your METAMMO account, sign-in, order history and stored login details | Contract (at your request) |
| Security, preventing fraud and abuse, sign-in logs | Legitimate interests (keeping accounts and orders safe) |
| Counting page views without storing anything on your device | Legitimate interests (running and improving the site) |
| Linking the pages of one visit (mm_sid) | Consent |
| Google Analytics | Consent (you can withdraw it at any time) |
| Publishing your review | Consent |
| Accounting and tax records, answering authorities | Legal obligation |
We do not send marketing e-mails, do not sell personal data and do not make decisions about you by automated means only.
5. Who we share it with
Only with providers that help us run the service, each receiving only what it needs:
- Hosting: data centre providers with servers in Germany and Finland.
- Network, security and e-mail forwarding: Cloudflare.
- Sign-in e-mails: Resend (EU region).
- Sign-in providers: Discord and Google, only if you choose them.
- Support: Discord, where our tickets run.
- Analytics: Google Analytics, only with your consent.
- Payments: our payment providers (currently PayPal), which process your payment details and act as independent controllers under their own privacy policies.
- Professional advisers and authorities where the law requires it.
6. International transfers
Our servers are in the EU. Some providers (for example Cloudflare, Google and Discord) may process data in the United States or other countries. Where that happens we rely on the safeguards the law provides: adequacy decisions, the EU–US Data Privacy Framework and its UK extension, or standard contractual clauses / the UK International Data Transfer Addendum. Ask us at [email protected] for details.
7. How long we keep it
| Data | Kept for |
|---|---|
| METAMMO account | Until you delete it |
| Stored login details of a purchased account | Until you remove them or delete your account |
| Sign-in sessions / sign-in links | 30 days / 15 minutes |
| Security logs | 12 months |
| Order records (order number, game, account, price, date) | For as long as the warranty applies to the account, so the lifetime warranty can always be honoured, and at least 6 years (UK accounting rules) |
| Our own page statistics | 14 months |
| Support conversations | Up to 2 years after your last order |
| Google Analytics data | 14 months |
When you delete your account, stored login details are erased at once and your e-mail and Discord link are removed from order records; the sale record itself stays for accounting and the warranty: keep your order number (MM-…) to claim it.
8. Security
Stored login details are encrypted (AES-256) with a key kept on a separate server from the website, and can only be displayed after a recent sign-in; every view is logged. Sign-in uses one-time links or Discord / Google, so we hold no passwords for your METAMMO account. If a breach puts your data at risk, we will tell you and the regulator as the law requires.
10. Your rights
Under the UK GDPR and, if you are in the EU, the EU GDPR, you have the right to:
- access your data and get a copy in a portable format;
- have it corrected or deleted;
- restrict or object to its use, including use based on legitimate interests;
- withdraw consent at any time (for example to analytics cookies);
- not be subject to decisions made only by automated means.
Signed in? Your account lets you download your data and delete your account yourself. Otherwise write to [email protected]. We answer within one month, free of charge. You can also complain to the UK Information Commissioner's Office (ico.org.uk/make-a-complaint) or to the data protection authority of the EU country where you live.
11. Changes
We update this policy when our practices change; the date at the top shows the latest version. Material changes are highlighted on this page.