01What we collect
- Google account: your name, email address and profile picture when you sign in.
- Game details: the player IDs you enter, and the public profile details we look up for them (name, level, region, likes).
- Orders and wallet: what you bought, amounts, order status and wallet balance.
- Payments: for cards, only the card brand, issuing bank and a masked number (we never see the full card). For eZ Cash, the RN, amount and a masked sender number, plus any phone number you choose to enter. Payment slips you upload.
- Order checks: some card payments are checked automatically for signs of stolen cards (for example many different cards in a short time). If an order is held, we ask for a screenshot of the bank message for the payment and a WhatsApp number. Only the store team sees these, and the screenshot is deleted 30 days after the check.
- Technical data: your IP address and sign-in cookies, used for security and to stop abuse.
02How we use it
To deliver your orders, verify payments, keep your wallet and order history, send receipts and delivery emails, give support, and prevent fraud. We do not sell your data or use it for advertising. The store page shows a short feed of recently delivered orders with the item and the player's in-game name (never the player ID, email or payment details).
03Who we share it with
- Dialog Genie, to process card payments.
- The NexAura payment and delivery gateway, to verify eZ Cash payments and deliver items to the player ID you entered.
- Brevo, to send order emails.
- Vercel and Neon, which host the website and database.
- Authorities, if the law requires it or to investigate fraud.
04Cookies and storage
We use only essential cookies: one keeps you signed in for up to 30 days. Your browser also stores your sign-in and display preferences (such as dark mode and language). We do not use advertising or tracking cookies.
05How long we keep it
Order and payment records are kept for as long as needed for accounting, refunds and fraud prevention. Sign-in sessions expire after 30 days or when you sign out.
06Security
The site uses HTTPS, sign-in tokens are stored only in hashed form, and admin access is limited to approved Google accounts. No system is perfectly secure, so keep your Google account protected.
07Your rights
You can ask to see, correct or delete your personal data by messaging us on WhatsApp. Some order and payment records may need to be kept by law or to handle refunds and disputes.
08Changes
We may update this policy. The version on this page applies from its “last updated” date.