Privacy policy.

Information we collect

Account details: your name, email address and password. Passwords are stored only as a salted hash, never in plain text.

Order details: what you bought, prices, the currency charged, coupon used, and the delivery email. The keys or credentials we deliver are stored encrypted.

Payment information: card and payment details are entered on the payment provider's page and are not stored by us. We keep only the payment status and reference.

Activity you choose to create: wishlist, reviews, and support messages you send us.

Email sign-ups: if you join our email list we store your email address and the time you agreed. We send marketing only to people who opted in, and every message can be unsubscribed from.

Technical data: basic request information such as IP address and browser type, used for security and rate limiting. We do not keep a visitor log or use advertising trackers.

Why we use it

To create and manage your account, process and deliver your orders, provide support, prevent fraud and abuse, show prices in your currency, send the emails you ask for, and meet legal and accounting obligations.

Services that process data for us

• Payment provider: processes your payment on its own hosted page.
• Database hosting (MongoDB): stores accounts, orders and catalogue data.
• Cloudinary: hosts and delivers product images.
• Email delivery provider: sends order, password-reset and opted-in marketing emails.
• Exchange-rate data provider: supplies currency rates; no personal data is sent.
• Our web hosting and CDN provider: serves the site and may process request data such as IP addresses.

We do not sell your personal information and we do not use third-party advertising trackers on the storefront.

Cookies and local storage

We use a session cookie to keep you signed in. Your browser's local storage remembers simple preferences such as your cart, wishlist, currency, and motion settings. We do not use cookies for cross-site advertising.

Security

Passwords are hashed, delivered keys are encrypted at rest, access to administration tools is restricted to authorised staff, and connections to the site are encrypted. No system is perfectly secure, but we take reasonable steps to protect your information.

How long we keep data

We keep account and order records while your account is active and as long as reasonably needed afterwards for accounting, dispute resolution, fraud prevention and legal reasons. Email-list entries are kept until you unsubscribe.

International transfers

Our providers may process data in other countries. Where required, we rely on appropriate safeguards for those transfers.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict some processing, and to withdraw marketing consent at any time. To exercise a right, email [email protected]. We will respond as quickly as we reasonably can. Some records (such as orders) may need to be kept for legal reasons.

Children

The site is not intended for children under 13 and we do not knowingly collect their information.

Changes to this policy

We may update this policy, for example when we add or change a service provider. The "Last updated" date shows the latest version.