Privacy policy

We collect the information needed to operate the store: account and delivery email details, order contents and status, support messages, security records, and limited device or traffic data used to protect and improve the service.

We use this information to provide accounts, create and fulfil orders, verify delivery access, prevent fraud and abuse, answer support requests, meet accounting or legal duties, and measure storefront reliability. We do not sell personal information.

Cloudflare provides edge delivery, security and aggregate traffic measurement; Supabase provides the authoritative database and account service; Resend sends transactional email; product suppliers fulfil eligible orders. Each provider receives only the data required for its role.

USDT transfers occur on public blockchains. Wallet addresses, transaction identifiers and amounts can be publicly visible on-chain. Order-specific deposit addresses, private keys and delivered credentials are excluded from browser analytics, email bodies and Telegram alerts.

Account sessions use secure HttpOnly cookies. Sensitive delivery data is encrypted at rest and revealed only through verified order access. Operational records are retained only as long as reasonably needed for delivery, support, security, dispute handling and legal obligations.

You may request access, correction or deletion of eligible account information through Order Support. Some order, payment, security or accounting records may need to be retained when law or legitimate fraud-prevention and dispute needs require it.

The storefront uses essential cookies for account, cart and order access. Privacy-preserving traffic measurement may record route, locale, country and performance data without storing raw wallet secrets, delivery contents or full IP addresses in application analytics.