Privacy Policy
Last updated: 13 Ekim 2026
This privacy policy explains how personal and technical data belonging to merchants, customers, and visitors using our infrastructure and services are processed and safeguarded.
1. Data we collect
Data processed within the scope of our services includes:
• Merchant data: Store name, domain / slug address, owner email address, and store logo.
• Customer data: Username, password cryptographic hash, and email if defined.
• Transaction data: Generated delivery keys, code lookup logs, and timestamps.
• Technical data: IP addresses, session data, and rate limit logs retained for security.
2. Use of data
Collected data is solely utilized to operate services reliably, maintain platform security, and prevent abusive or unauthorized access attempts. Data is never disclosed or sold to third parties for marketing purposes.
3. Cookies and local storage
The platform employs HTTP-only session cookies (e.g., customer_token, store_token) for authentication security. Preferences such as theme and language are preserved in local browser storage (localStorage).
4. Third-party services
No external payment processors or third-party advertising tracking networks are integrated into the platform.
5. Retention
Records are retained only for as long as strictly necessary.
6. Security
All network transmissions are protected with modern TLS encryption (HTTPS). Passwords are cryptographically hashed using bcrypt, and sensitive configuration data is safeguarded with robust industry encryption standards.