Privacy Policy
Last updated:
Data we collect
Email, username, order metadata, IP address, and basic device info. We never store full card numbers — payments are tokenized by our PCI-DSS providers.
How we use it
To deliver products, fight fraud, respond to support requests and meet legal obligations.
Cookies
We use first-party cookies for session and Cloudflare-managed cookies for bot mitigation. No third-party advertising cookies.
Your rights
GDPR/CCPA: you can request access, correction or deletion at any time via support.
Retention
Order records: 30 days in KV, 5 years in cold backup for legal reasons. Support tickets: 60 days.
Security
TLS 1.3 everywhere, HSTS preloaded, strict CSP, Cloudflare Turnstile bot protection, rate limiting and HMAC-signed orders.
Contact
For privacy requests, please open a ticket via the Support Center on our site.