Recommended Searches esign ksign gbox instagram youtube roblox picsart minecraft

Privacy Policy

Last updated: July 05, 2026

This Privacy Policy explains what information NabzClan AppStore collects, why, and how it's handled.

1. Information We Collect

Account information: When you sign in via NabzClan (XenForo single sign-on), we receive your NabzClan username, user ID, email address, and group/role membership. We do not collect a separate password — authentication happens on NabzClan's side.
Usage data: App download history, IP address, and basic request metadata, used for rate-limiting, abuse prevention, and download statistics shown on the Service.
Publisher data (if you apply to publish): Display name, company/portfolio links, and the reason you want to publish, as submitted on the Publisher application form.
Signing certificate data (optional feature): If you use our IPA signing feature, we store the P12 certificate and mobile provisioning profile you upload, along with metadata extracted from them (expiry date, bundle identifier, team identifier, entitlements, revocation/OCSP status). Certificate passwords are used only to validate and sign with the certificate and are stored so the certificate can be reused for future signing requests you initiate.

2. How We Use Information

To authenticate you and keep you signed in.
To let you download and, where applicable, sign apps.
To enforce download speed tiers and rate limits fairly.
To review and moderate publisher applications and app submissions.
To notify our moderators internally (via Discord) when an app, app version, or publisher application needs review. These internal notifications never include your email address.

3. Cookies & Sessions

We use session cookies to keep you signed in and to remember basic preferences. We do not use third-party advertising trackers.

4. Certificate & Signing Data Handling

Signing certificates and provisioning profiles you upload are sensitive credentials. We store them to provide the signing feature you requested; we do not use them for any purpose other than fulfilling signing requests you initiate. If you believe a certificate you uploaded has been compromised, revoke it with your certificate authority and remove it from your account.

5. Third-Party Services

We use a small number of internal services to operate the Service, including a signing proxy used only to process signing requests you initiate, and Discord webhooks used only for internal admin/moderation notifications. We do not sell or share your personal information with advertisers or data brokers.

6. Data Retention

We retain account and usage data for as long as your account is active. Uploaded certificates remain stored until you delete them from your dashboard or your account is removed.