Privacy policy

Last updated: October 2026

1. What we collect

When you create an account, place an order, request a wallet deposit, or contact support, we collect the information you provide, such as your name, email address, order details, and wallet transaction history. We do not collect payment card numbers directly; those are handled by the payment provider you choose.

2. How we use your data

We use your data to process orders, manage your wallet, send order and account emails, prevent fraud, and respond to support requests. We do not sell your information to advertisers or analytics providers.

3. Server-side processing

API keys, order requests, and wallet operations are handled server-side. They are never exposed in HTML, JavaScript, or query strings. Communication with our ordering API and payment providers happens over HTTPS with certificate verification enabled.

4. Cookies and sessions

We use a short-lived session cookie to keep you signed in and to protect forms against cross-site request forgery (CSRF). The cookie is HttpOnly, SameSite=Lax, and is only sent over HTTPS when your connection supports it. We also show a cookie consent notice when required.

5. Third parties

Order placement and delivery are handled by Tools Empire Developer API. Payment processing is handled by the payment gateway selected in our admin panel. These providers receive only the data necessary to complete your transaction.

6. Security

We use modern security headers, strict transport security on HTTPS connections, prepared database statements, input validation, and rate limiting to reduce common web vulnerabilities. Server errors are logged privately and are not shown to visitors.

7. Your rights

You can update your name and password in your account settings. If you want a copy of your personal data or would like it deleted, contact support. Some records, such as completed orders, may need to be retained for legal or accounting purposes.