We collect account information you provide (name, email, password hash, role), storefront details, product metadata, purchase ledger entries, verification events, and uploaded content files.

Payments. Vault Coin packs are purchased with USDC on-chain. We store payment references and transaction hashes needed to credit balances. We do not custody buyer wallet seed phrases.

Files. Product files are stored in private object storage and delivered only to authenticated buyers with a valid purchase token.

Cookies / sessions. We use session cookies for authentication (Auth.js).

Sharing. We do not sell personal data. We may share data with infrastructure providers (hosting, database, storage, payments) and when required by law.

Retention. Account and ledger records are retained while your account is active and as needed for fraud prevention, chargebacks, and legal obligations.

To request account deletion or data access, contact the site operator. Some financial records may be retained after deletion where required.