Privacy Policy

MCAKey’s privacy policy explains what personal data we collect, why we collect it, how we use it, and your rights over it — including rights under the EU General Data Protection Regulation (GDPR). MCAKey does not sell your data, does not use advertising pixels, and collects only what is necessary to operate our business and serve our customers.

Last updated: May 2026  ·  MCAKey LLC

MCAKey LLC ("MCAKey," "we," "us," or "our") operates mcakey.com. Questions about this privacy policy? Contact us at [email protected].

1. Who We Are

Data Controller: MCAKey LLC
1001 S. Main St. STE 500, Kalispell, Montana 59901, United States
Email: [email protected] · Phone: +1 716 306 4665

2. What Data We Collect

Data you provide directly

When placing an order: full name, email address, billing address, phone number (optional), payment method details (processed by PayPal or other providers — we never store card numbers).

When contacting support: name, email, message content, and order reference.

When subscribing to our newsletter: email address and subscription preferences.

Data collected automatically

When you visit mcakey.com, we and our service providers collect: IP address, browser type, operating system, pages visited, time on page, referring URL, and cookie data. This is collected via Google Analytics 4 and Cloudflare for performance monitoring and security — not for advertising.

3. How We Use Your Data

Order fulfillment — to process payment, deliver your key, and send confirmation and invoice. Legal basis: contract performance.

Customer support — to respond to questions and process replacements. Legal basis: contract performance and legitimate interest.

Fraud prevention and security — to detect and block abuse. Legal basis: legitimate interest.

Newsletter — only if you have subscribed. Legal basis: consent. Unsubscribe at any time via the link in any email.

Analytics — to understand site usage and improve performance. Legal basis: legitimate interest (with cookie consent where required).

Legal compliance — for tax and accounting obligations. Legal basis: legal obligation.

We do not use your data for automated decision-making or profiling.

4. How Long We Keep Your Data

Order data: 7 years (tax and accounting obligations). Support communications: 2 years after last interaction. Newsletter subscriptions: until you unsubscribe, then removed within 30 days. Analytics data: retained in aggregated, anonymized form.

5. Who We Share Your Data With

We do not sell your data. We share it only with service providers under appropriate data processing agreements:

  • PayPal — payment processing
  • Cloudflare — security and DNS
  • Google Analytics 4 — anonymized website analytics
  • WP Mail SMTP / email delivery provider — transactional emails
  • Newsletter plugin — subscription management (data stored on our server, not shared with ad platforms)
  • Live chat provider (Tidio / Chatwoot) — support chat transcripts

6. Cookies

Strictly necessary: Shopping cart, session management, security tokens. Cannot be disabled.

Functional: Remember currency and language preferences.

Analytics: Google Analytics 4 aggregate usage tracking. Does not identify you personally.

We do not use advertising cookies, retargeting pixels, or cross-site tracking. Manage preferences via our cookie consent tool (CookieYes) or your browser settings.

7. Your Rights

Depending on your location, you may have the right to access your data, correct inaccurate data, request deletion, restrict processing, receive your data in portable format, object to processing, and withdraw consent at any time.

EU/EEA and UK residents have these rights under the GDPR and UK GDPR respectively. To exercise any right, email [email protected]. We will respond within 30 days. You may also lodge a complaint with your national data protection authority.

8. Data Security

All data transmitted between your browser and our site is encrypted via SSL/TLS. The site is protected by Cloudflare. Access to customer data is restricted to authorized personnel. Payment data is processed by PCI-DSS compliant providers. In the event of a breach affecting your rights, we will notify affected users and relevant authorities in accordance with applicable law.

9. International Data Transfers

MCAKey is based in the United States. If you are in the EU, EEA, or UK, your data may be transferred to and processed in the US. We rely on appropriate safeguards — including Standard Contractual Clauses where required. Our service providers (Google, Cloudflare) maintain their own transfer mechanisms.

10. Children's Privacy

Our products are available to users under 18 only with parental or guardian consent. We do not knowingly collect personal data from children under 13 without verified parental consent. Contact [email protected] if you believe a child has provided data without appropriate consent.

11. Changes to This Policy

We may update this privacy policy from time to time. We will revise the "last updated" date at the top of this page. For significant changes, we will notify active customers by email where possible. Continued use of mcakey.com constitutes acceptance of updates.

12. Contact

MCAKey LLC · [email protected] · +1 716 306 4665 · 1001 S. Main St. STE 500, Kalispell, Montana 59901, US