SHUD AND SHUD.DEV PRIVACY POLICY
Version of October 24, 2026
This policy explains what data the developer of SHUD (the "Developer", "we") processes when you use the SHUD program and the shud.dev website (together, the "Service"), why, how long it is kept and what rights you have. This policy supplements the End User License Agreement (EULA); terms are used with the same meaning.
1. Who processes the data
1.1. The data controller is Maksim Odilovich Gulyamov, self-employed (Russian taxpayer ID 504318703461), the developer of SHUD. For any data-related questions: guliamovpro@yandex.ru or Telegram @cesar1337 (CESAR1337 — responsible for data processing).
1.2. We do not sell data and do not share it with third parties for advertising purposes.
2. What data we process
2.1. shud.dev account (if you registered):
your email address and the name you entered;
your password — only as an irreversible hash (Argon2); we never store or see the password itself;
the registration date, the date of your last website sign-in, your plan and its paid-until date.
2.2. Linked computers (if you signed in to your account in SHUD):
a random SHUD installation identifier, the Windows computer name, the SHUD version, the operating system;
the date the computer was linked and the time it last contacted the cloud.
2.3. Cloud data — what you yourself synchronise from SHUD: teams, players, matches, tournaments, logos and avatars. This data may contain information about third parties (for example, players' nicknames, names and SteamIDs). You are responsible for having the right to upload it (EULA, clause 5.3); we store it only to synchronise it between your devices.
2.4. Account history: website sign-ins, linking and unlinking computers, changes in the cloud (which computer changed how many records), signing out everywhere, password changes, replacing cloud data. Each history entry includes the computer name and the IP address the action came from, so that you and the administrator can spot suspicious activity. The history, including IP addresses, is kept for 10 days.
2.5. Anonymised SHUD usage statistics — under Section 6 of the EULA. They are not linked to your account: a separate random installation identifier is used. The server uses the IP address only to determine the country, region and city; the IP address itself is not stored.
2.6. IP addresses. An IP address is stored only in the account history (clause 2.4) and is deleted after 10 days. IP addresses are not stored in anonymised statistics (clause 2.5) or in server logs.
2.7. We do not collect: payment data (payments are not accepted yet), precise location, the contents of SHUD settings, Director data, or files and file paths on your computer.
3. Why we process data
to create and maintain your account and ensure sign-in and security (including signing out on all devices);
to synchronise data between your computers;
to restore access if you forget your password;
to calculate used storage and apply plan limits;
to estimate the number of installations, ensure compatibility, fix bugs and set development priorities (anonymised statistics);
to prevent abuse and breaches of the EULA.
Legal bases: performance of our agreement with you (the EULA) and our legitimate interest in operating and protecting the Service; for anonymised statistics — a condition of using the program accepted in the EULA.
4. Cookies and browser storage
4.1. The website uses one strictly necessary cookie — shud_session. It holds a random session identifier, is required to sign in, is not accessible to page scripts (HttpOnly) and lasts up to 30 days or until you sign out.
4.2. Your browser may store technical display settings for the website. There are no advertising, analytics or third-party tracking cookies.
5. Who data may be shared with
5.1. The hosting provider on whose servers shud.dev runs — only to store data and operate the Service.
5.2. An email service — your email address, to send a password reset email.
5.3. Public authorities — only where required by applicable law.
5.4. HUD download links in the marketplace may lead to third-party websites; their data processing is governed by their own rules.
6. Retention periods
the account and computers — for as long as the account exists; they are deleted when the account is deleted;
cloud data — while the subscription is active; it is deleted 7 days after the subscription ends (the account itself is kept);
deleted cloud records are kept as "tombstones" (without content) for at least 90 days so that the deletion reaches all your computers;
files (logos, avatars) no longer referenced by anything may be deleted after 30 days;
account history and the IP addresses in it — 10 days;
website session — up to 30 days; computer tokens — up to 90 days of inactivity; password reset link — 1 hour;
anonymised statistics — no longer than 13 months, then only in aggregated form.
Server backups may keep data for a limited time after deletion until the backups are overwritten.
7. Your rights
7.1. At any time you can:
view your data, linked computers and history in your shud.dev account;
download a copy of your cloud data (the "Download my data" button in your account);
change your name and password;
unlink any computer, sign out on all devices and in all browsers;
delete your account together with your cloud data (the "Delete account" button in your account).
7.2. You may also request information about the processing of your data, its correction, restriction of processing or erasure, withdraw consent and object to processing — by writing to guliamovpro@yandex.ru or Telegram @cesar1337. We will respond within the time limit set by applicable law. You have the right to lodge a complaint with the data protection authority of your country.
7.3. Anonymised statistics are not linked to your account, so we cannot find them by your email; to stop them being sent, uninstall SHUD (EULA, Section 6).
8. Security
The connection to shud.dev is protected by HTTPS. Passwords are stored only as hashes, and access tokens are stored only as hashes too; changing your password or pressing "Sign out on all devices" revokes all tokens. Only the Developer has access to user data in the admin panel. No protection is absolute; if we learn of a breach affecting your data, we will notify you as required by law.
9. Children
The Service is not intended for children under 14. If you are under 14, use a shud.dev account only with the consent of your parents or legal guardians.
10. Changes to this policy
We may update this policy. The new version is published at shud.dev/privacy with its date; we will announce significant changes on the website or in the program.
11. Contacts
Email: guliamovpro@yandex.ru. Telegram for data questions: @cesar1337 (CESAR1337). Website: shud.dev.