Privacy notice
This draft describes how the website handles account and order data. It remains subject to review before launch.
Data used by the application
When connected, Supabase Auth handles website sign-in credentials. Application records include a profile, order snapshots, messages, operational notes and private completion images. Supported game login details, game UID/server context, sign-in codes and device instructions submitted through private forms are encrypted before storage and kept outside ordinary chat. Billing fields shown in the pre-launch checkout are preview-only and are not submitted or saved. We do not collect mailbox, Microsoft or social-account passwords, recovery codes, session tokens or raw card details.
Access and storage
Customers can access their own orders and published evidence. Only administrators can request or reveal private account submissions. Customers can open official device sign-in instructions for their own active request. Customer Service Agents can see safe submission status but cannot request or reveal those details. Evidence storage is private and authorized image links expire. Authentication uses session cookies. No advertising trackers are installed by default.
Providers and rights
Supabase is the intended authentication, database, and storage provider. Controller identity, hosting region, international transfers, retention periods, subprocessors, and a rights-request contact must be confirmed before launch.
Contact details pending
A verified privacy and support contact has not yet been configured. Submit requested game login details and sign-in verification only through the private forms inside your order, never in ordinary messages.