Privacy Policy
Last changed:
What we collect
- your email address, if you registered on the website, and your name — the one you gave or the one Telegram passes on
- your password — stored only as a one-way hash — and the language you use the shop in
- your agreement to news by email and when you gave it, if you did
- your Telegram ID — when you use the Mini App (the account is created from your Telegram sign-in) or link Telegram on the website
- your order history and balance movements
- the USDT TRC-20 wallet address you enter in a payout request
- the payment reference NowPayments returns
- your IP address — briefly while a rate-limit window is open, and after a successful sign-in, as a record that the account has been signed in to from it; the record counts for 90 days and is removed at a later cleanup
What we do not collect
Card details. Payment is in cryptocurrency through NowPayments; payment credentials never pass through our servers and are not visible to us.
Why we hold it
- signing you in and protecting the account
- delivering goods and keeping your purchase history
- sending a payout to the wallet address you gave
- emails about top-ups, purchases and payouts, if the account has an email address
- news and offers from the shop by email, only if you agreed to them at registration or in your profile
- support conversations
- defending against abuse and automated attacks
Emails about top-ups, purchases and payouts come whether or not you agreed to news. You can stop news at any time, with the unsubscribe link in every such email or in your profile.
Who else sees it
- NowPayments — processing the payment
- Vercel — hosting the site
- our email provider — delivering messages
- Telegram — signing in to the Mini App and notifications, if you use the Mini App or linked Telegram
- Google Analytics and Ahrefs Analytics — aggregate visit statistics
- Vercel Speed Insights — how fast pages load
The database is hosted in the European Union (Frankfurt).
Cookies and analytics
On the website, necessary cookies keep you signed in, protect the sign-in form and remember your language; without them there is no login. The Google Analytics and Ahrefs Analytics scripts on the website use their own identifiers to count visits, and Vercel Speed Insights measures how fast pages load without a cookie; all three load only after you accept the cookie banner; the link in the footer withdraws that answer. The Mini App loads no analytics: there, the sign-in data Telegram passes identifies you.
How long we keep it
For as long as the account exists. Records of money movement — payouts and the addresses they were sent to included — are kept longer: they are accounting, and they do not disappear with the account.
Your rights
You can ask support for a copy of your data, a correction, or deletion of the account. There is no self-service deletion — support does it by hand on your request. Some records — transactions, service logs and the record of an account merge — remain for accounting reasons; a merge record keeps the address and Telegram ID of the account that was merged.
Contact
Data requests go to support on Telegram.