Privacy & Data Protection

Privacy Policy Your Data, Your Rights

We believe privacy is a fundamental right. This comprehensive policy explains how we collect, use, protect, and respect your personal information with complete transparency.

Last Updated
July 15, 2025
Effective Date
July 1, 2025
GDPR
Compliant
256-bit
Encryption
Zero
Data Breaches

Quick Navigation

Jump to any section that interests you

Data Collection

What information we collect and why

Learn more

Data Usage

How we use your personal information

Learn more

Data Security

How we protect your information

Learn more

Your Rights

Control over your personal data

Learn more
Data Collection

What Information We Collect

We collect only the information necessary to provide you with the best Steam gift card purchasing experience while respecting your privacy.

Information We Collect

Transparent data collection practices

Personal Information

Information you provide directly when creating an account or making a purchase.

Email address for account creation and order delivery
Payment information processed securely by our payment partners
IP address for fraud prevention and security
Device information for optimal service delivery

Automatically Collected Data

Information collected automatically to improve our services and prevent fraud.

Browser type and version for compatibility
Operating system and device specifications
Pages visited and time spent on our website
Referral source and marketing campaign data

Cookies & Tracking

Technical data that helps us provide a better user experience.

Essential cookies for website functionality
Analytics cookies for performance optimization
Preference cookies for personalized experience
Security cookies for fraud prevention

Why We Collect Data

The legitimate reasons behind our data collection

Order Processing

We need your email address to deliver your Steam gift card codes and send order confirmations. Payment information is processed securely by our certified payment partners to complete your purchase.

Fraud Prevention

We analyze IP addresses, device information, and purchasing patterns to detect and prevent fraudulent activities, protecting both our customers and our business from security threats.

Service Improvement

Website usage data helps us understand how customers interact with our platform, allowing us to optimize performance, fix issues, and enhance the overall user experience.

Customer Support

Order history and account information enable our support team to provide quick, personalized assistance when you need help with your purchases or account issues.

Data Collection Timeline

Account Creation

Email address, password hash, and basic account preferences are collected when you create an account.

Purchase Process

Payment information is processed securely by our payment partners. We only store transaction IDs and order details.

Ongoing Usage

Website interactions, preferences, and support communications are collected to improve our services.

Data Usage

How We Use Your Information

We use your data responsibly and only for the purposes outlined below. Your information is never sold or shared with third parties for marketing purposes.

Order Processing

Essential for completing your purchases

Email Delivery

Instantly deliver your Steam gift card codes to your email address

Order Confirmation

Send purchase confirmations and receipt information

Payment Processing

Process payments securely through our certified payment partners

Security & Fraud Prevention

Protecting you and our platform

Fraud Detection

Analyze purchasing patterns to identify suspicious activities

Account Security

Monitor for unauthorized access attempts and unusual account activity

Risk Assessment

Evaluate transactions for potential security risks

Customer Support

Providing excellent customer service

Order History

Access past orders for support inquiries and troubleshooting

Live Chat Support

Provide personalized assistance based on your account information

Issue Resolution

Quickly resolve problems with code delivery or account access

Service Improvement

Making our platform better for everyone

Performance Optimization

Analyze website usage to improve speed and reliability

Bug Detection

Identify and fix technical issues affecting user experience

User Experience

Enhance interface design and functionality based on user behavior

Legal Basis for Data Processing

Under GDPR and other privacy regulations, we process your data based on the following legal grounds:

Contractual Necessity

Processing required to fulfill our contract with you (delivering your Steam gift cards)

Legitimate Interest

Fraud prevention, security, and service improvement are legitimate business interests

Consent

Optional features like marketing communications require your explicit consent

Legal Compliance

Processing required to comply with tax, anti-money laundering, and other legal obligations

Vital Interests

Processing necessary to protect your vital interests or those of others (emergency situations)

Public Task

Processing necessary for tasks carried out in the public interest (regulatory compliance)

Data Security

How We Protect Your Data

We implement industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Encryption

256-bit AES encryption for data at rest
TLS 1.3 encryption for data in transit
End-to-end encryption for sensitive data
Hardware security modules (HSM)

Infrastructure

Secure cloud hosting with AWS
Regular security audits and penetration testing
24/7 monitoring and incident response
Redundant backups and disaster recovery

Access Control

Multi-factor authentication (MFA)
Role-based access permissions
Regular access reviews and audits
Principle of least privilege

Security Standards & Compliance

We maintain the highest security standards and comply with international data protection regulations.

PCI DSS Level 1

Highest level of payment card industry security compliance

ISO 27001

International standard for information security management

GDPR Compliant

Full compliance with European data protection regulations

SOC 2 Type II

Audited security controls and operational effectiveness

Incident Response

How we handle security incidents

1

Immediate Detection

24/7 monitoring systems detect security threats in real-time

2

Rapid Response

Security team responds within 15 minutes of incident detection

3

Containment

Immediate isolation of affected systems to prevent spread

4

Recovery & Notification

System restoration and customer notification within 72 hours

Security Track Record

Our commitment to data protection

0
Data Breaches
Since our founding in 2019
99.99%
Uptime
< 15min
Response Time
Security Guarantee

We guarantee the security of your data. In the unlikely event of a breach affecting your information, we'll provide free credit monitoring and identity protection services.

Your Rights

Your Data Your Control

You have complete control over your personal data. These rights are protected by law and we make it easy to exercise them.

Right to Access

See what data we have about you

You can request a complete copy of all personal data we hold about you. This includes:

Account information and preferences
Purchase history and transaction records
Communication history with support
Website usage and analytics data

Response time: Within 30 days of request

Right to Rectification

Correct inaccurate information

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected or completed.

Update email address or contact information
Correct billing or shipping addresses
Fix account preferences or settings

Updates processed immediately upon verification

Right to Erasure

Delete your personal data

Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances.

Data no longer necessary for original purpose
Consent withdrawal for marketing
Data processed unlawfully

Some data may be retained for legal compliance

Right to Restrict Processing

Limit how we use your data

You can request that we restrict the processing of your personal data in certain situations.

While accuracy is being verified
Processing is unlawful but deletion not wanted
Data needed for legal claims

Right to Data Portability

Export your data

You can request your data in a structured, commonly used format that can be transferred to another service.

JSON format for easy import
Complete account and transaction history
Secure download with encryption

Right to Object

Opt out of certain processing

You can object to processing of your data for direct marketing, research, or legitimate business interests.

Marketing emails and promotions
Analytics and profiling
Automated decision making

How to Exercise Your Rights

We make it easy to exercise your privacy rights. Choose the method that works best for you.

Live Chat

Contact our privacy team through live chat for immediate assistance with your data rights.

Email

Send a detailed request to our privacy team via email for complex data requests.

Account Settings

Manage many privacy settings directly from your account dashboard.

Important Information

• We may ask for identity verification to protect your privacy

• Most requests are processed within 30 days

• Some data may be retained for legal compliance

• You can file a complaint with your local data protection authority

Data Retention

How Long We Keep Your Data

We only retain your personal data for as long as necessary to provide our services and comply with legal requirements.

Active Accounts

Ongoing
While account is active
Account information
Purchase history
Preferences and settings

Inactive Accounts

3 Years
After last activity
Automatic deletion notice
90-day grace period
Complete data removal

Legal Requirements

7 Years
Financial records
Tax compliance
Anti-money laundering
Fraud prevention

Detailed Retention Schedule

Different types of data have different retention periods based on legal requirements and business needs.

Data Type Retention Period Reason
Account Information While account active + 3 years Service provision
Purchase History 7 years Tax compliance
Payment Information Not stored (processed by partners) PCI compliance
Support Communications 3 years Quality assurance
Website Analytics 26 months GDPR compliance
Marketing Data Until consent withdrawn Consent-based
IP Address Logs 12 months Security and fraud prevention
Stay Informed

Contact Us & Policy Updates

Questions about our privacy policy? We're here to help. Plus, learn how we'll notify you of any changes.

Privacy Support

Get help with privacy-related questions

Data Protection Officer

[email protected]

Response time: Within 48 hours

Live Chat

Available 24/7 for urgent privacy matters

Average response: 2 minutes

Policy Updates

How we communicate changes

Notification Methods

Email notification to all users
In-app notification banner
Website announcement
RSS feed for updates

Update Timeline

30
Days Before

Advance notice for major changes

7
Days Before

Final reminder notification

Effective Date

Policy changes take effect

Your Options

Continue using our services
Delete your account
Export your data
Contact us with concerns