Privacy Policy

Last updated: September 23, 2026

1. Information We Collect

  • Email address — provided at checkout for order confirmation and credential delivery
  • Order details — product purchased, amount, payment reference, timestamps
  • Payment data — handled by NOWPayments; we receive only order ID and payment status
  • First-party usage events — page paths, checkout starts, and Telegram-link clicks; no advertising identifier or cookie is used
  • Technical data — IP address, browser type, referrer (standard web logs)

2. How We Use Your Information

  • Process and fulfill your order (deliver credentials via email)
  • Send order confirmation and delivery emails via Resend
  • Provide customer support via Telegram
  • Prevent fraud and abuse
  • Measure checkout reliability and support demand using first-party, cookie-free event counts
  • Comply with legal obligations

3. Information Sharing

We do not sell your data. We share information only with:

  • NOWPayments — for payment processing (order ID, amount, callback URL)
  • Resend — for transactional email delivery (email address, order details)
  • Supabase — our database provider (stores order data securely)
  • Legal authorities — when required by law

4. Data Retention

  • Order records: retained for 3 years for accounting and support
  • Email addresses: retained while you have active orders or until deletion request
  • Web logs: retained for 30 days
  • First-party usage events: retained only for operational reporting and periodically deleted

5. Your Rights

  • Access your order data — use the My Account page
  • Request deletion — contact us via Telegram or email
  • Opt out of emails — unsubscribe link in every email (transactional emails excepted)

6. Cookies & Tracking

We do not use advertising or third-party analytics cookies:

  • Anonymous first-party event counts record page paths, checkout starts, and Telegram-link clicks
  • These events do not store your email address, full IP address, or a cross-site identifier
  • No advertising or third-party tracking cookies

7. Security

  • All data transmitted via TLS 1.3
  • Database access restricted to service role (server-side only)
  • No card data ever touches our servers
  • Credentials stored encrypted in database

8. Third-Party Services

9. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards per GDPR/UK GDPR.

10. Changes to This Policy

We may update this policy. Material changes will be posted here with a new "Last updated" date.

11. Contact

Privacy questions? Contact us via Telegram support.