Privacy Policy

Information is collected directly from you and generated by your use of the Service.

• Account details: name, email address, and password (stored as a salted hash, never in plain text).
• Order data: items purchased, quantities, prices, currency, and order status.
• Wallet data: balance, currency, and the transaction history behind it.
• Billing details you save for checkout, such as a billing address.
• Technical data such as IP address and browser type, captured for security and fraud prevention.

1. To create and secure your account, including email verification.
2. To process orders, debit or credit your wallet, and deliver activation keys.
3. To respond to support requests sent to our contact address.
4. To detect and prevent fraud, abuse, and unauthorized account access.

Card and gateway payments are handled by our payment processor; full card numbers are never stored on our servers. The processor shares back only the status and identifiers needed to confirm a top-up or order, such as a transaction id and amount.

Session cookies keep you signed in and remember items in your cart. These are functional cookies required for the Service to work and are not used for third-party advertising.

Order and transaction records are retained for as long as your account is active and for a reasonable period afterward to satisfy accounting and fraud-prevention obligations. Account data is deleted on request, subject to the retention above.

Access

Request a copy of the personal data held about your account.

Correction

Ask for inaccurate account details to be corrected.

Deletion

Request deletion of your account and associated personal data.

Portability

Request your order history in a portable format.

Send a request for any of the above to support@plasma.example.

A limited set of processors act on our behalf to run the Service: the payment gateway that handles top-ups and direct purchases, and the key-fulfillment supplier that sources activation keys for the catalog. Each receives only the information needed to perform its function — order totals and identifiers for the gateway, product and quantity for fulfillment.

Personal data is not sold to third parties.

Passwords are stored as salted hashes, sessions are issued as signed tokens, and the payment webhook that credits wallets or completes orders is verified by signature before it is trusted.

The Service is not directed at children and account registration requires the legal capacity to form a binding contract in your jurisdiction.

Because the Service and its processors operate across borders, account and order data may be processed in a country other than the one you access the Service from.

This policy may be updated from time to time. The revision and date above reflect the current version; continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

Data controller

<TODO: legal entity name>

Registration

<TODO: legal entity registration>

Registered address

<TODO: legal entity address>

Privacy questions can be sent to support@plasma.example.