Privacy

What we collect

• Account details. Your email address and a hashed password. We never store your password itself.
• Order details. The delivery address you supply, what you ordered, what you paid, and the resulting shipment tracking.
• Payment references. The receiving address, expected amount and transaction identifier for your order. We do not hold your wallet, keys or seed phrase, and we never ask for them.
• Technical data. Request logs used to operate the service and to rate-limit abuse. Client addresses are stored as a salted digest, not in the clear.

What we do not collect

We do not use advertising or analytics trackers, we do not sell or share personal data with third parties for marketing, and we do not build behavioural profiles.

Why we hold it

To take and fulfil your orders, to let you see your own order history and tracking, to answer support requests, to prevent fraud and abuse, and to meet our accounting obligations.

Cookies

We set two cookies, both strictly necessary and neither used for tracking:

• a cart cookie, so a cart survives while you browse;
• a session cookie, so you stay signed in.

How long we keep it

Order records are kept for as long as accounting rules require. You can ask us to close your account at any time; we then remove your account and address book and retain only the minimum order record we are obliged to keep.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Contact us and we will respond within one month.

Security

Passwords are hashed with PBKDF2-SHA-256. Sessions are stored as digests. Traffic is served over HTTPS with HSTS. Administrative actions are recorded in an audit log.