Bu metnin bağlayıcı sürümü İngilizcedir.The English text is the binding version of this document.
Privacy Policy – Unity Asset Store MCP (Free and Pro)
Version 1.0 · Effective date: 20 October 2026
This policy explains what personal data Unity Asset Store MCP processes and why. It covers the free edition, the Pro edition and the Unity bridge package. The data controller is Enophia Studio, Istanbul, Türkiye (hello@enophiastudio.com).
In short: the software runs on your computer. Your Unity password and access token never leave the Unity Editor. Nothing about your projects or your Asset Store library is sent to us. The only data sent anywhere is what Pro needs to check your license with Lemon Squeezy. We have no telemetry and no analytics, and we do not sell data.
1. Data that stays on your computer
The software keeps these files in your user profile, for example %LOCALAPPDATA%\EnophiaAssetStoreMcp on Windows:
| What | Why |
|---|---|
| A connection file per open Unity Editor (port and a random session token) | Lets the MCP server find and reach your Editor |
Pro: license.json (license key, activation id, purchase and check dates, an anonymous machine fingerprint) | Keeps your license working offline |
Pro: library.db (file names of packages you downloaded, your tags and notes) | Search and organization features |
Pro: queue.json (download queue) | Resumes bulk downloads |
These files never leave your computer. Delete them at any time; Pro then asks you to activate again.
- Unity session. The Unity bridge uses the session you are signed in with in the Unity Editor. Your access token is used only inside the Editor process and is never written to disk or sent to us.
- Direct to Unity. Calls to the Unity Asset Store are made by your own Unity Editor directly to Unity Technologies. Unity's privacy policy applies to them.
- AI assistants. Tool results, such as your list of owned assets, are given to the AI assistant you connected. They are then processed under that assistant provider's terms, for example Anthropic, OpenAI or Google. Connect only assistants you trust.
2. Data sent for Pro license checks
Pro checks your license with the Lemon Squeezy license service when you activate it, then at most about once a day. Each check sends:
- your license key and the activation id Lemon Squeezy assigned to this machine;
- an activation name made of your operating system and an anonymous 8-character machine id (for example "Windows machine 3fa9c21b"). No computer name, user name or hardware identifier is sent.
Lemon Squeezy also receives your IP address and the time of the request, as any web server does.
- Purpose: to confirm the license is valid and to enforce the number of machines (performance of our contract with you).
- Retention: for as long as the license exists, plus any period required by law.
3. Purchases
Purchases are handled by Lemon Squeezy as merchant of record. It collects your name, email address, billing and payment details and country, under its privacy policy. We do not receive your payment card details.
We receive the order details: your name, email address, country, product, price, license key and order status. We use them to deliver and support your license, handle refunds and meet accounting and tax obligations. We keep them for as long as the law requires, generally up to 10 years for accounting records.
4. Support
If you email us, we process what you send in order to answer you. We keep the correspondence for up to 3 years after the matter is closed, unless the law requires longer.
5. Legal bases
We process the data above:
- to perform our contract with you (license delivery, activation and support);
- to comply with legal obligations (accounting and tax); and
- for our legitimate interest in preventing license abuse.
These correspond to Article 5(2)(c), (ç) and (f) of the Turkish Personal Data Protection Law No. 6698 (KVKK), and Article 6(1)(b), (c) and (f) of the EU General Data Protection Regulation (GDPR), where these laws apply.
6. Transfers abroad
Lemon Squeezy processes data in the United States and other countries. We transfer data to it, and it processes data, as needed to sell and license the software you request, with the safeguards required by applicable law.
7. Your rights
Under KVKK (Article 11) and, where applicable, the GDPR, you may:
- ask whether we process your data, and get access to it;
- ask for it to be corrected or deleted;
- object to processing or restrict it;
- receive your data in a portable format; and
- withdraw consent where processing is based on consent.
Contact hello@enophiastudio.com; we answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority (KVKK), or to the data protection authority in your country.
8. Children
The software is not directed at children under 16.
9. Changes
We will post changes here with a new effective date. We will notify licensed users of significant changes by email.