Everything the shop knows about you, including the parts a privacy page usually skips
Checkout asks for one thing, and it's an email address. The rest of what we hold, the order writes down by itself as it moves. Two pieces of that are genuinely watchful — your IP address, and what Webvisor records on a public page. Both sit near the top of this page rather than down in a footnote.
Written from what the code and the process actually doTwo records about you, three about the order
The first two below are about a person. The last three are about a transaction. Nothing exists outside them. The right-hand column gives each record a job rather than a deadline: a tidy number of days would read better than what's written there, and it would be a number nobody actually keeps to. How long any one record stays follows from several things at once — which of the five it is, what it was collected to do, what keeping the site safe from abuse takes, whether the sale it belongs to is settled or still being disputed, and what the shop has to be able to show for it afterwards.
| The record | What it does | How long it lasts |
|---|---|---|
| What you type in | One field is required and it's your email, because the order needs somewhere to answer to. A name and a contact sit beside it and stay empty if you leave them empty. Nothing on the form asks for an address or a phone number; those fields were never built. | While the order is live, and while anything can still be asked about it. |
| What your browser hands over | Your IP address and user-agent go into the security log. They are what makes abuse of the site traceable back to something, and that is the whole of the job they do here. | While they can still serve that job. |
| The order record | The contents, the totals, and every status the order held on its way to being settled. This is the shop's own paperwork for a sale that happened. | While the sale still has to be accounted for. |
| Payment references | Heleket's identifier for your invoice and the amounts against it, so money that arrives can be matched to the order it belongs to. Card numbers and wallet keys are not part of this and never reach the shop. | While a transfer still has to be tied back to its order. |
| Delivery events | Timestamps for the archive being built and for the downloads taken against the link. If a delivery has to be reconstructed later, this is what it gets reconstructed from. | While that delivery can still come up. |
1Why the list is short
There's no registration on this shop, and that one decision settles most of what follows. No account means no password to lose, no profile to fill in, and nowhere for data to quietly pile up. A purchase gives us an email address, plus a name and a contact if you felt like typing them. Everything after that in the table above is a by-product of an order moving, not something you were asked to supply.
Payment runs through Heleket, and the transfer happens on their side. What comes back to the shop is a reference and a figure. The shop holds no card numbers and no wallet keys, and that isn't restraint on our part: there is nowhere for them to sit and nothing that would ever put them there.
2What watches, and where it stops
Public pages of the live shop run Yandex Metrika, and it runs with Webvisor switched on. That deserves saying flatly instead of softening into a line about improving the service: Webvisor records the session itself, meaning movement, clicks and the shape of what you did on the page, not merely that a visit happened. Metrika is a third party. It works to its own terms, it sets its own cookies, and those cookies are not ours to switch off on your behalf.
Set against that, the shop's own cookie is dull. There is exactly one. It holds your cart from page to page, it's an opaque token rather than anything a script can read, and it carries nothing personal. A second rule covers every page here: none of ours passes a referrer onward, so the next site you open is never told which of our pages sent you.
Where analytics stops is the part worth knowing. Nothing loads at checkout, on your order page, at the download, or anywhere in the admin area. That exclusion is written into the site's code. It isn't a setting, which is precisely why it can't be quietly switched back on, and a path the code cannot place is treated as sensitive instead of assumed safe.
3What leaves, and what never does
Two outside parties touch any of this, and you meet both of them yourself. Heleket takes the payment; what crosses to it is a sum and an order identifier, while your email, name and contact stay here. Yandex Metrika takes the analytics on public pages. That is the list. Nothing else goes anywhere, short of the law requiring it.
None of it is sold. None of it is handed to advertisers or folded into an audience somewhere. The shop makes its money selling accounts, and there is no second business running quietly behind that one.
Your address gets used for its own order and for nothing else. Three messages can reach it and no others: the order was created, the archive is ready, the order went under review. There is no marketing here, so there is no newsletter to escape and no offer to turn down.
4The two levers you have
Cookies are handled in your browser's settings, here as anywhere else. Turn the analytics ones off and the shop still works: you can order, pay and collect what you bought with them gone. The cart cookie is the only one the shop needs, and it isn't the one you'd be turning off.
If you want to know what's held on you, or want it gone, write to support from the address you used at checkout. That address is what ties a request to an order in the first place. We consider every request of this kind. What the answer turns on is what governs the period in the first place — which record it is, what it was collected to do, what keeping the site safe from abuse takes, whether the sale behind it is settled or still being disputed, and what the shop has to be able to show for it afterwards. So removal isn't unconditional: some records stay. A sale still has to be accounted for, a dispute still has to be settled, abuse still has to stay traceable, and some of it the shop is bound to keep regardless.
Where this page stops
Questions about your own data go to support, sent from the order's address. The three pages below hold the ground this one stays off.