Last updated: November 1, 2026

Privacy Policy

Short version: we collect the minimum data needed to run the service and we never sell it to anyone. Long version below.

What we collect

When you place an order

  • Your email (for order confirmation and refill notifications).
  • The public @username or URL you're sending traffic to.
  • Payment method metadata (last 4 digits of card, or crypto wallet address). Full card numbers are handled by our payment processor — we never see them.
  • Your IP address at the time of order (for fraud detection).

When you create an account

  • Your name and email.
  • A hashed version of your password (we never store the plaintext).
  • Timestamps of login events.

Automatic (analytics)

  • Aggregate page views and traffic sources via privacy-friendly analytics (Plausible, no cookies).
  • Basic error tracking (no personal data captured).

What we do NOT collect

  • Passwords to your Instagram, TikTok, YouTube, or other social accounts. We never ask for these.
  • Full payment card numbers (handled by our processor).
  • Content of your posts, DMs, comments, or any private data from your social profiles.
  • Location data beyond city-level (derived from IP for fraud checks).

Why we collect what we collect

  • Order fulfillment. Your @username tells us where to send traffic. Your email lets us confirm delivery.
  • Account management. To let you log in and see your order history.
  • Fraud detection. IP and payment metadata help us catch stolen cards.
  • Service improvement. Aggregate analytics help us understand which pages need improving.

Who we share data with

  • Payment processors (Stripe, PayPal, Coinbase Commerce) — as needed to process payment.
  • Our supplier network — receives only the @username to fulfill, never your identity.
  • Legal authorities — only when compelled by a valid court order in Poland or the EU.

We do not sell, rent, or trade your personal data to any third party, ever.

How long we keep data

  • Order records: 5 years (required by Polish tax law).
  • Account data: as long as your account is active, plus 90 days after deletion request.
  • Analytics: 12 months, then aggregated and anonymized.

Your rights (GDPR)

If you're in the EU or UK, you have the right to: access your data, correct it, delete it, export it, and object to processing. Email [email protected] — we respond within 30 days.

Cookies

We use one essential cookie for session management. That's it. No tracking cookies, no third-party ad pixels, no fingerprinting.

International transfers

Data is stored in the EU (Frankfurt AWS region). If our payment processors transfer data outside the EU, they use Standard Contractual Clauses to maintain GDPR-equivalent protection.

Contact

Privacy questions: [email protected]. Data protection officer: same email.