Privacy policy

Updated 2 October 2026.

For order, business and privacy enquiries, use our private support form.

Data controller and contact

The store operator is responsible for personal information processed by BreachVanta. Use our private support form for privacy requests.

Information we process

Account and order data includes your name, email, billing details, password hash, purchased items, order status and support correspondence. Crypto order records include asset, network, receiving address, amount, transaction hash and review history. Hosting and security services also process IP addresses, request URLs, browser information and security events. We do not request wallet private keys or recovery phrases.

Why we use it

We use account, order and contact information to perform our contract with you: process payments, deliver products and provide support. Security processing serves our legitimate interest in protecting the store and preventing abuse. Where applicable, we retain transaction records to meet legal and accounting obligations. Optional marketing, if introduced, will have separate controls; none is currently enabled.

Service providers and transfers

BitLaunch provides hosting; Cloudflare provides DNS, proxy and security services; Support conversations are stored in our WordPress dashboard. Proton Mail handles manual fulfillment messages. WordPress and WooCommerce operate the store. Coinbase supplies public reference exchange rates: our rate request sends the base currency USD, not your name, email, order number or transaction hash. Providers may process data in countries other than yours. Contact us for information about relevant arrangements and available safeguards.

Public blockchain records

Blockchain transactions are public. A hash can link an order to public wallet activity. We cannot erase a blockchain transaction. Do not include private personal information in transaction memos.

Retention and rights

We retain account information while the account is active and order/support information for as long as needed for fulfillment, disputes and applicable legal obligations. You may request access, correction, deletion, restriction or a copy of your information, and object where applicable. Some legal records may need to be retained after an account closes. You can complain to your competent data-protection authority. We do not use automated decision-making to approve crypto payments.

Cookies

See cookie information. No advertising pixels or marketing analytics have been intentionally installed.

Private support tickets

Support requests and replies stay on this website; ticket notifications are not emailed. We collect the name, email, optional order reference and message you submit. Save your private ticket link to check replies. Anyone with that link can access the conversation, so keep it confidential. Support pages are excluded from indexing and instructed not to cache. Do not include passwords, wallet recovery phrases or private keys.