Privacy policy

01What we collect

• Order details: the email address you enter at checkout, the products you bought, the order number, the amount and the date.
• Payment details from PayPal: your name, country and payment method type (for example "Visa ending 1234"). Card numbers are handled by PayPal; we never see or store them.
• Fraud prevention: your IP address, approximate country and browser type at the time of purchase.
• Account details (only if you create an account): your email address and a securely hashed password. We can't read your password.
• Messages: what you send us by email, through the contact form or in the live chat.
• Reviews (only if you write one): your rating, your comment and the name you choose are shown on the product page.

02How we use it

• To deliver your keys, invoices and download links by email.
• To give you support and process replacements or refunds.
• To detect and prevent fraud and chargebacks.
• To keep the accounting records the law requires.

We only send emails related to your orders, your account or your support requests, plus one request to review your purchase a few days after delivery. We don't send marketing emails.

03Who we share it with

• PayPal processes your payment (PayPal account, card or Google Pay) under its own privacy policy.
• tawk.to provides our live chat. If you use it, it processes your messages and basic visitor details such as IP address and browser on our behalf.
• Our hosting and security providers (our web host and Cloudflare) process technical data such as IP addresses to deliver the site and protect it from attacks.

We never sell or rent your personal data.

04Cookies and local storage

• Account cookie (sos_acct): keeps you signed in to your account. It is only set if you sign in.
• Cart: your cart is saved in your browser's local storage so it's still there when you come back. It never leaves your device until you check out.
• Live chat and payment: tawk.to and PayPal set their own cookies needed for the chat and checkout to work.

We count visits with Cloudflare Web Analytics, a privacy-friendly service: it doesn't use cookies, doesn't build a profile of you and doesn't follow you to other sites. We don't use advertising cookies or trackers.

05How long we keep it

We keep order and invoice records for as long as accounting and tax laws require. Account data is kept until you ask us to delete your account. Support messages are kept as long as needed to help you.

06Your rights

You can ask us to see, correct or delete your personal data, or to stop using it, by emailing [email protected]. We'll reply within 30 days. Some order records must be kept for legal reasons even after a deletion request. You can also complain to your local data protection authority.

07Security

The whole site uses HTTPS, passwords are stored as secure hashes, sign-in links and invoice links are signed, and access to order data is restricted.

08Contact

For any privacy question, email [email protected].