Privacy — What We Store, and For How Long

Privacy

There is no account here, so there is not a great deal to tell. But not a great deal is not the same as nothing, and a page that says we value your privacy and then stops has told you exactly nothing.

Below is every piece of data this shop touches: what it is, why it exists, where it goes, and when it disappears. It was written by reading the code that does it, which is why it names things a template never would.

The short version

No account, no password, no newsletter, no marketing list.
No analytics service, no advertising tag, no chat widget, no fonts or files loaded from anywhere else. Everything on every page comes from this domain.
One contact and one payment is the whole order. An alias address is fine, as long as you can actually read it.
An order record deletes itself 180 days after the order was placed. Nothing is kept here just in case.
We never sell or hand on what we hold.

What stays in your own browser

These live in your browser’s local storage. They sit on your device, not on our server, and clearing your browser data removes every one of them.

Your cart. The pins you picked, as short names. Nothing else, no prices, no identity. It stays until you order or empty it.
Your recent orders. The last ten order links, each with the secret token that opens it. This is what lets the shop offer to reopen an order you walked away from, and it is why you can close the tab without losing anything. Treat it like any other saved link: whoever can use your browser can open those pages.
Where you came from. If you arrived through a link carrying a campaign code, or through a Google ad, the identifier in that link is remembered so that an order placed three days later is still credited to the right channel. It describes the click, not you. It stays in your browser and only travels anywhere if you place an order, which carries it along.
One date. Today’s date, written once, so that a second visit on the same day is not counted twice.
Coin prices, held for one minute so that browsing does not re-ask for rates on every click. Gone the moment you close the tab.

Counting visits, honestly

The shop counts events: a visit, a checkout started, a pin looked at. What reaches our server is a counter and nothing more, one number going up by one. No identifier travels with it, no cookie is set, and there is no path back from the number to a person.

We also record roughly how long a page was open, in coarse steps: under ten seconds, under a minute, over ten minutes. Coarse on purpose. The exact number would tell us nothing the step does not, and a step cannot be pinned to anybody.

What an order keeps on our server

This is the one place where personal data exists. The record is created when you continue to payment and it removes itself 180 days later.

The contact you gave, exactly as you typed it: an email address, a Discord handle or a Telegram handle. It is how you get reached, and it is the only identifier attached to the order.
If your contact is an email: the address, plus a one-way fingerprint of it. The fingerprint is the lookup key the recovery page uses, so an address can be found again without the index holding anything readable.
Your note, if you left one.
The IP address the order arrived from, and the two-letter country our network reports for it. This exists for one reason: when twenty orders appear within a minute, it is the only way to tell twenty interested people apart from one script. It is never shown to you or to anyone else, and it is deleted together with the order.
The campaign code or ad click identifier from your browser, if there was one.
The order itself: which pins, what the total was, what state it is in.
The payment: the address you were given, the exact amount, the coin, the network and the status the provider reports back.
Two forms of your order link’s token: a one-way hash, so we can tell a genuine link from a guess, and a sealed copy that only our server can open, so the recovery email can send the link to you again. The plain token is never written down anywhere.

What is deliberately not in there: no password, no card number, no Steam login, no date of birth, and nowhere to put a home address, because there is nothing to send anywhere. Your code appears on your order page.

What we pass on, and to whom

The payment provider. It generates the address you pay to. It receives the amount in dollars, the coin you chose, our order number and a one-line description saying how many items are in the order. It does not receive your contact, your note or your IP address from us.
The email provider, only if your contact is an email. It carries the order-link message, the codes once they are released, and the recovery message. It sees the address and the content of those messages.
Our host. The pages and the backend both run on one hosting network. Like any host anywhere, it processes the requests that reach it, the IP address, the browser’s user agent, the time, in order to serve the page and to keep automated traffic out.
The price feed. Coin prices are fetched by our own server, so the price source never sees our visitors. If our server cannot be reached, your browser asks the public price feed directly instead. That is the single case in which a request from this site goes to another host, and it only happens when something is already broken.

And nobody else. There is no analytics service and no advertising tag on any page here. The site’s own security policy allows scripts from this domain only, so this is not a promise you have to take on trust: your browser enforces it.

What reaches the operator

Every order posts a notice into a private channel we run, so that a human knows it exists. That notice carries the contact you gave, the pins, the total and the origin, IP address and country. It goes to us. It is not public and it is not a community anywhere.

The phone alert that gets someone up for a paid order carries none of that, on purpose: order number, pin names, amount. Nothing that identifies a customer is ever on that screen.

When a recovery email is sent, we get a line saying which address it went to. That line is the only way to notice recovery being probed by somebody who is not you.

The blockchain part

Crypto payments are public by design. The address you paid to, the amount and the time are visible to anyone who cares to look. That is true of every crypto payment everywhere, and not something this shop adds.

We see that a payment arrived. We do not know who owns the wallet it came from, unless you tell us. We never ask you to prove who you are, and there is no step in this shop where documents are collected.

How long each thing stays

Cart, recent order links, campaign code, ad click identifier, visit date: in your browser, until you clear it.
Coin prices: until you close the tab.
Order record, including contact and IP address: 180 days from the order, then it removes itself.
The recovery lookup entry for an email address: the same 180 days.
An order removed from our panel: 30 days in a recoverable bin, then gone for good.
A request, an offer or a restock line: 90 days.
Counters: numbers only, no identifier of any kind, kept a little over a year.
Abuse counters keyed on an IP address: minutes, at most an hour.

What you can ask us for

Write to [email protected], or message the same handle on Discord or Steam. You can ask what we hold on you, ask for a copy of it, ask for a correction, or ask us to delete it. No form, no template, no case number: plain words are enough, and you get an answer on the same channel, usually within a few hours.

Two honest limits. While an order is still running, deleting its record means cancelling the order, because the record is the order. And a payment already written to a blockchain cannot be removed by anyone, ourselves included.

If you would rather leave less behind in the first place: use an alias address, or give a Discord handle instead of an email. Both work exactly the same way at checkout. The only thing you give up with a handle is the automatic backup of your order link, which is explained where you choose.

If this page changes

If what we do changes, this page changes with it and the date below moves. There is no list to notify you through, because we do not keep one.

Last updated: 21 August 2026.