We collect and process information necessary to operate our services, manage accounts, facilitate transactions, and maintain platform security.

Depending on your interactions with our services, this information may include:

Account Information

• Email addresses and authentication identifiers.
• Account details received through supported authentication providers.
• Account preferences and verification status.

Transaction Information

• Order history, transaction references, and invoice identifiers.
• Payment amounts, currencies, and transaction statuses.
• Account balances, balance transactions, and refund records.

Delivery Information

• Recipient usernames and account identifiers.
• Information required to verify recipients and fulfill orders.
• Delivery confirmations and relevant fulfillment records.

Technical Information

• IP addresses and approximate city, region, and country inferred from them.
• Browser and device information.
• Session information, request timestamps, and security logs.
• Information necessary to detect suspicious activity and protect our infrastructure.

Communications

We collect information voluntarily submitted through our customer support channels and other available communication features.

Certain information may also be received from integrated authentication providers, payment processors, and external services involved in processing transactions.

We process personal information for the following purposes:

• Creating and managing customer accounts.
• Authenticating users and maintaining account security.
• Processing payments and managing transactions.
• Facilitating digital product delivery.
• Maintaining transaction records and resolving disputes.
• Responding to customer inquiries.
• Detecting fraud, preventing abuse, and protecting our infrastructure.
• Complying with applicable legal and regulatory obligations.
• Providing optional features and communications requested by users.

Where applicable, processing is based on contractual necessity, compliance with legal obligations, legitimate interests, or consent.

Our legitimate interests include maintaining operational security, preventing fraud, investigating abuse, and protecting our services, subject to applicable legal requirements.

Where processing requires consent, users may withdraw that consent through available account settings or our support channels.

We use independent third-party service providers to support essential platform operations.

These services may include authentication providers, payment processors, email delivery services, hosting infrastructure, security providers, and digital fulfillment systems.

Depending on the services you use, relevant personal information may be shared with these providers to perform their respective functions.

Some providers operate independently and process information under their own privacy policies and contractual terms.

We may disclose relevant information when required by applicable law, in response to valid legal requests, or where reasonably necessary to investigate fraud, prevent abuse, and protect our services.

We do not sell personal information or share personal information for cross-context behavioral advertising.

Users may access their accounts through supported authentication methods, including email-based authentication and third-party authentication providers.

When using third-party authentication, we receive information authorized through the applicable authentication process.

This information may include account identifiers, display names, profile information, and email addresses.

Information received through connected services is used to authenticate users, maintain accounts, and provide features explicitly requested by users.

Optional integrations may require additional permissions, which are presented through the relevant authorization process.

Users may manage certain connected-service permissions through the respective third-party provider.

Payments may be processed through independent payment service providers.

We collect and maintain transaction information necessary to confirm payments, manage orders, maintain account balances, investigate payment discrepancies, and resolve disputes.

Payment providers may independently collect additional information under their own privacy policies and applicable regulatory obligations.

Where cryptocurrency payments are supported, relevant blockchain transactions may be publicly accessible and permanently recorded on their respective networks.

We do not control the independent processing practices of payment providers or the permanent nature of public blockchain records.

We use essential cookies and related technologies to maintain account sessions, facilitate authentication, and protect our services.

The essential HTTP-only sign-in cookie has a 400-day expiry that is renewed on visits. Signing out clears it. Email verification codes expire after 10 minutes. Your interface language preference is stored locally in your browser.

Short-lived authentication cookies may be used during third-party sign-in procedures.

Our infrastructure and security providers may implement additional cookies or similar technologies to detect suspicious activity and protect against unauthorized access.

We do not use advertising cookies. For our tracked entry link (melik.store/d) we set one first-party HTTP-only cookie that lasts 400 days. It stores a signed random browser identifier, a broad source category (such as Discord or Google) for both the first and the most recent contact, and their timestamps — not search terms, full referring URLs, or email addresses. This record is functional: it decides the payment channel the entry link grants and it is copied onto orders placed from that browser so we can tell which link produced a sale. New account registrations may be linked to that identifier so we can count registrations by source; existing account logins are not new registrations. Attribution records and their account links expire after 400 days. Clearing cookies or changing browsers may count a new browser visitor. Our other arrival measurement — the visit counters and the anonymous daily funnel events — remains optional and is disabled by Browser Do Not Track and Global Privacy Control preferences. We count optional anonymous daily funnel events without including account identifiers, email addresses, order IDs, amounts, or page URLs. Daily aggregate counters expire 30 days after the last event in that daily bucket. Browser Do Not Track and Global Privacy Control preferences disable this optional measurement.

With your explicit permission, we load Google Analytics 4, which uses Google analytics cookies to measure page visits and purchase activity. Our manually configured events send page paths without query strings, product quantities, commerce totals and currencies, and a random transaction identifier for purchase deduplication. These manual events exclude customer email addresses, Roblox usernames, wallet addresses, account identifiers, and unrelated URL query parameters. Enhanced measurement also records interactions such as scrolling, form engagement, searches, and outbound link clicks, which may include page, form, search, or destination-link metadata. Advertising features are disabled. Google may process browser, device, and network information when analytics is enabled. No Google Analytics requests are made before you allow it. You can reject or withdraw permission through Analytics preferences in the footer; withdrawal stops future measurement and clears Google analytics cookies on this site. Browser Do Not Track and Global Privacy Control preferences keep Google Analytics disabled.

If our use of cookies or tracking technologies changes, this Policy will be updated, and additional consent mechanisms will be implemented where required by applicable law.

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, and loss.

Access to personal information is restricted according to operational requirements.

We may use authentication controls, security monitoring, infrastructure protection, and transaction verification procedures to maintain the integrity of our services.

Although we take reasonable precautions, no electronic storage or transmission system can guarantee absolute security.

We reserve the right to implement additional security measures and temporarily restrict account access when reasonably necessary to investigate suspected security incidents.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

Retention periods depend on the nature of the information, operational requirements, contractual obligations, and relevant legal requirements.

Account information may be retained while an account remains active.

Transaction, payment, delivery, refund, and support records may be retained for accounting, dispute resolution, fraud prevention, and legal compliance purposes.

Security logs are retained according to operational and security requirements.

Certain records may remain following account closure where necessary to fulfill legal obligations, investigate fraud, or establish, exercise, or defend legal claims.

Information that is no longer required will be deleted or anonymized in accordance with applicable requirements.

Our services may rely on infrastructure and independent service providers operating in different jurisdictions.

Personal information may therefore be processed or transferred outside the country in which a user resides.

Where applicable data protection laws impose requirements on international transfers, we will use appropriate legal mechanisms and safeguards.

Users may contact us to request additional information concerning international data processing and applicable transfer safeguards.

Our services are intended exclusively for individuals aged 18 or older. Minors are not permitted to create accounts, make purchases, or otherwise use our services.

We do not knowingly collect or process personal information from minors. By using our services, users represent that they meet the minimum age requirement.

We reserve the right to suspend or terminate accounts and restrict transactions where we reasonably suspect that a user is underage. We may request age verification where necessary.

If we become aware that personal information has been collected from a minor, we will take appropriate measures to delete it, subject to applicable legal retention requirements.

We are not responsible for false age declarations or unauthorized use by minors to the extent permitted by applicable law.

Depending on applicable law, users may have the right to:

• Request access to their personal information.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Request restrictions on certain processing activities.
• Object to processing in applicable circumstances.
• Request a portable copy of eligible information.
• Withdraw consent where processing is based on consent.
• Submit complaints to the relevant data protection authority.

Requests may be submitted through our official support channels.

We may require reasonable identity verification before processing requests involving personal information.

Requests will be evaluated in accordance with applicable legal requirements.

We may decline or limit requests where legally permitted, including where retaining certain records is necessary to comply with legal obligations or establish, exercise, or defend legal claims.

We may periodically update this Privacy Policy to reflect operational changes, modifications to our services, changes involving third-party providers, or applicable legal requirements.

The current version will be published on our website with its latest revision date.

Where required by applicable law, material changes will be communicated through appropriate channels.

Continued use of our services does not replace any additional consent that may be legally required.

For privacy-related questions, concerns, or requests regarding personal information, please contact us through the official support channels available on our website.