Effective 2026-08-20

MW4 Cheats is a private, paid loader for MW4. We treat privacy the way we treat the loader itself: fewer moving parts is safer. This page explains what data we hold, why we hold it, how long it stays, and how you get it out of our system when you want it gone.

What we collect

Account

When you register on /signup/, we store your email address and a hash of the password you chose. Passwords are stored using a modern one-way hash (bcrypt with a per-user salt); we cannot read your password, and neither can a support agent. Email is used to sign you in, deliver your license key, send billing receipts, and warn you about security events on your account.

Licensing

The loader binds each subscription to one machine using a hardware ID. We do not store the raw hardware identifiers your PC exposes. We store a hash of them, plus your current subscription state (active / paused / expired) and the timestamp of your last successful check-in. That hash is what our HWID lock uses to confirm the key running on your PC is the same key we sold you.

Technical

Our backend logs the IP address that connects to the license server, the user-agent string of the loader, and the response code we returned. IPs are used for rate limiting, spam prevention, and blocking obvious abuse (credential stuffing, key-reseller scraping). The user-agent tells us which loader build you are on so we can confirm compatibility with the current status page notes.

Payment

Card numbers, billing addresses, and payment tokens are handled by our payment processor. We never see, log, or store any of it. What we receive from the processor is a transaction reference, the currency and amount paid, the product code, and the email you checked out with. That is what we use to activate your subscription and issue a refund if you ask for one under our refund policy.

What we don't collect

Just as important as the list above is the list of things we deliberately do not touch:

• No real name, no postal address, no phone number.
• No in-game telemetry. The loader does not read your K/D, your loadouts, your friends list, your voice chat, or anything else from MW4 or from your Activision account.
• No advertising cookies, no remarketing pixels, no cross-site trackers.
• No third-party analytics. There is no Google Analytics on this site, no Meta Pixel, no Hotjar, no session-replay tooling, no A/B testing script.
• No social login. We do not read anything from Discord, Google, or Steam accounts.
• No device fingerprinting beyond the licensing HWID hash described above.

The reason is simple. Every third-party script we would add to this site is another company that would end up knowing you use MW4 Cheats. That is not a trade we are willing to make on your behalf.

How long we keep it

Email address and password hash: kept for the life of your account. If you ask us to delete your account, we complete the deletion within 30 days and confirm it by email.

HWID hash: kept for the length of your active subscription. When your subscription ends and is not renewed within 90 days, the HWID hash is dropped from the licensing database. Reactivating after that point issues a fresh binding.

IP and request logs: 30 days, then rotated out. We keep them long enough to investigate a security incident and no longer.

Payment records: the transaction reference and receipt data are kept for as long as tax and consumer-protection law in the payment processor's jurisdiction requires (typically 7 years for accounting records). We cannot delete those on request; that is a legal retention obligation, not a choice.

Who we share it with

Three service providers, and no one else:

• Fungies — our payment processor. They see your card details and your billing address; we do not.
• Brevo — our transactional email service. They handle delivery of your license key, receipts, and password-reset messages. They see your email address and the content of those emails.
• Cloudflare — our edge network and DNS provider. They see the IP addresses that connect to mw4cheats.com in order to filter attacks and cache static assets.

We do not sell data. We do not share data with advertising networks, data brokers, or affiliate tracking platforms. We do not share data with Activision, Infinity Ward, or Ricochet. If we are ever forced to disclose account data by a valid legal order we can verify, we will comply with the narrowest possible reading of that order and, where the order allows it, notify the affected user.

Your rights (GDPR / CCPA)

Whether you live in the EU, the UK, California, or anywhere else, we apply the same set of rights to every account:

• Access — request a copy of everything we hold on your account.
• Correction — fix an email address that was mistyped.
• Deletion — erase your account and its associated data. Completed within 30 days, subject to the payment-record retention noted above.
• Export — receive your account data in a machine-readable JSON file.
• Opt-out of any future marketing communications. We do not currently send marketing email at all, and if that ever changes it will be opt-in.
• Complaint — you have the right to complain to your local data protection authority if you believe we have mishandled your data.

To exercise any of these rights, write to us from /contact/ using the email address on the account. We will verify the request against that email and act on it within 30 days.

Cookies

Two cookies, both first-party, both essential:

• mw4_session — a signed session token issued when you sign in at /login/. HttpOnly, Secure, SameSite=Lax, expires 30 days after your last sign-in.
• mw4_cur — a preference cookie that remembers the currency you chose on the cheat page. Not required for the site to work; you can clear it and pick again next time.

No third-party cookies are set from any page on this site. No tracking pixels, no beacons, no fingerprint scripts.

Changes to this policy

If we change anything material about what we collect, how long we keep it, or who we share it with, we will email every active account at least 14 days before the change takes effect. Minor edits (typos, clarifications, contact-address updates) will be published here with an updated effective date at the top of the page.

Contact

Privacy questions, data requests, or complaints go through /contact/. This policy sits alongside our terms of service and refund policy; reading all three gives you the full picture of what MW4 Cheats commits to.