Privacy Policy

1. What we collect

Only these fields are ever stored on our system:

• Email address — used only for login. Any valid email works, including anonymous ones.
• Password — stored as a bcrypt hash. We never store the plaintext password.
• Order records — the products you purchased, quantities, total, and assigned payment wallet address.
• Support messages — any tickets you open through your dashboard.
• Session token — a random identifier that keeps you signed in. Expires after 7 days.
• Basic visit logs — IP address, user-agent string, country (derived from IP), and referrer URL for each page view. Used for traffic analytics and abuse prevention only. Visit logs are aggregated into daily counters after 30 days and raw rows are deleted.

2. What we do NOT collect

• Real name
• Phone number
• Physical address
• Government ID or any KYC documents
• Browser fingerprint or cross-site tracking identifiers
• Third-party analytics, marketing, or advertising cookies
• Credit card or bank account information
• Your crypto wallet’s ownership identity

3. Cookies

Accoutify uses one type of cookie: a session cookie that keeps you signed in to your dashboard. It contains a random identifier and expires after 7 days of inactivity. We do not use tracking, marketing, or analytics cookies. No third-party scripts are loaded on any page.

4. Third-party services

We do not use Google Analytics, Facebook Pixel, Hotjar, Intercom, Segment, or any tracking/marketing platform. No third party has access to your data. Hosting and DNS providers process request metadata (IP, user agent) only in-memory to serve pages — this is standard web infrastructure, not controlled analytics.

5. Payment data

Crypto payments are processed on public blockchains. We store only the payment wallet address assigned to your order and the transaction hash once confirmed. We do not know the real identity behind any wallet unless you voluntarily disclose it.

6. Data retention

Retention periods by data type:

• Account data — retained while your account is active. Request deletion at any time via a support ticket.
• Orders — retained for 2 years to support 1-year guarantee claims and tax records.
• Visit logs (IP, user-agent, referrer, path) — individual rows retained for 30 days, then aggregated to anonymous daily counters and the raw rows are deleted.
• Support tickets — retained with the ticket lifespan. Closed tickets are archived for 12 months.

7. Security

All traffic is encrypted in transit with HTTPS. Passwords are stored as bcrypt hashes (10 rounds). Session tokens are random UUIDs. The database is hosted on a dedicated server with encrypted disk storage. We do not share login credentials internally outside of the operations team, and all operational access is logged.

8. Your rights

You have the right to:

• Access all data we hold about your account
• Export your order history in JSON format
• Correct inaccurate data
• Request permanent deletion of your account and associated data
• Opt out of any future marketing (we don’t do marketing anyway)

Submit any of these requests via a support ticket in your dashboard.

9. Children

Accoutify is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, open a ticket and we will remove it immediately.

10. Law enforcement requests

Because we collect no identifying information beyond an optional email address and a bcrypt password hash, we have nothing meaningful to hand over in response to law enforcement requests. We comply with valid legal process only for the data we actually hold, which for most users is limited to email + order history.

11. Changes to this policy

Material changes to this policy will be posted here and reflected in the last-updated date at the top. We encourage you to review it periodically.

12. Contact

Questions about this policy or your data? Open a ticket from your dashboard.