Privacy Policy
Last updated: 2026-11-02
1. What we collect
· Account: email address, password (one-way hash only — never stored in plain text), signup time;
· Transaction: orders, items purchased, delivered credentials, top-ups and balance history;
· Technical: IP address, user agent, timestamps — used solely for anti-fraud, rate limiting and debugging;
· Visit statistics: page views (time, IP, referring domain, device type, country/region) stored in our own server database — used only to see where traffic comes from and which pages nobody reads, never for ad targeting;
· Session cookie: a session identifier (PHPSESSID) that expires when you log out or close the browser;
· Statistics cookie: one random string (kak_vid) used only to tell "one person visiting twice" from "two people visiting once". No personal data, valid 1 year, deletable in your browser at any time.
2. What we never collect
We do not store card numbers, CVVs or payment passwords — payments are handled end-to-end by third-party payment providers; we only learn whether a payment succeeded.
We run no advertising pixels and no third-party analytics (no Google Analytics, no Meta Pixel, no session-recording tools); visit statistics are produced by our own code and never leave our server.
3. How we use it
To deliver your order and credentials, to verify replacement claims within the 24-hour first-login warranty, to keep balance and accounting records, to prevent fraud and abuse, and to send order/top-up/password-reset notifications. We never use your email for marketing you did not ask for.
4. Who we share it with
· Payment provider: amount and order reference, as required to process the payment;
· Email provider: to send order credentials and password-reset emails;
· Suppliers: receive only the item and quantity purchased — never your email, name or any identifier;
· We never sell or hand your data to anyone else, except where legally compelled.
5. Retention & deletion
Orders and credentials are kept for the warranty window plus the accounting period required (normally under 24 months); logs are kept for 90 days. You can ask support at any time to export or delete your account and personal data, except records we must keep for accounting or legal reasons.
6. Security
HTTPS everywhere, passwords stored as one-way hashes, delivered credentials visible only to the signed-in buyer. No transmission over the internet is absolutely secure — please don't reuse the same password across sites.
7. Age & scope
This service is for adults; you must be 18+ to register. You are responsible for complying with the terms of the platforms you buy for and with your local laws.
8. Changes
Any update changes the "Last updated" date at the top of this page; material changes are announced on the site.
9. Contact
For data requests (access / deletion / correction): Telegram support · kk@kakshop.com