Legal
Privacy policy
Last updated 21 September 2026
We collect what an order needs and little else. This page explains what that is, who else sees it, and how to get it removed.
What we collect
When you order: your email address, the products you bought, and the amount paid. Your email is how we send your key and how support finds your order.
Automatically at checkout: your IP address, country, and browser user agent. These are passed to our payment provider for fraud screening and are not used for advertising.
Our private analytics records the pages you visit, referring page, campaign tags, timestamps, browser and device details, and pseudonymous visitor and session IDs. SourceDesk uses this information to measure traffic and sales attribution. We do not use it for advertising.
If you contact support: whatever you put in the ticket, kept alongside your order so the next person to help you has the history.
What we never see
Card numbers and payment credentials go straight to the payment provider and never touch our servers. We receive confirmation that a payment succeeded and nothing more.
Who processes your data
SellAuth operates our storefront, order records, and key delivery. Payment providers connected to that account process the transaction itself. Each has its own privacy policy governing what it does with the data it holds.
SourceDesk, hosted at fastpaste.net, processes private site analytics. It is not an advertising network and does not receive your payment credentials.
We do not sell your data, and we do not share it with advertisers or data brokers.
How long we keep it
Order and payment records are kept for as long as tax and accounting rules require, typically several years. Support tickets are kept for two years. Fraud-screening signals such as IP addresses are kept for twelve months.
The pseudonymous analytics visitor ID in your browser expires after 90 days. You can clear it at any time by removing this site’s stored data in your browser.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Deletion requests are honoured except where a record must be retained by law — order invoices being the usual exception.
Send requests to support@example.com from the email address on the order. We reply within 30 days.
Cookies and browser storage
We do not use advertising cookies. Browser storage keeps your cart and announcement preference so those features work between visits.
SourceDesk stores a pseudonymous visitor and session record in local storage for up to 90 days. The checkout page, which is hosted by SellAuth, sets its own cookies needed to process the payment.