Privacy Policy

1. Overview

This policy explains what personal data a1.codes collects, why we collect it, and what your rights are. We try to keep this short — if anything is unclear, write to support@a1.codes.

The short version. We collect the minimum data needed to deliver your orders and run the Service. We never sell your data, we do not show the full gift-card code until you reveal it yourself, and we never store your payment method on our servers.

2. Data we collect

You give us

• Email address — to identify your account and deliver order receipts.
• Order details — what you bought, when, for which region, and the amount.
• Optional: Telegram handle, if you choose to link the bot.

We collect automatically

• Technical data — device type, browser, IP address (truncated), language preference.
• Operational data — error events, security events, and basic request logs needed to keep the Service reliable and safe.

We never collect

• Full payment card numbers or CVCs.
• Full gift-card codes in logs, support reports, or ordinary operational data. Codes are stored securely and shown only when you reveal them from your order.
• Sensitive categories like health or political opinions.

3. How we use it

• To deliver and support your orders.
• To detect and prevent fraud and abuse.
• To send transactional emails (receipts, security alerts). We don't send marketing without your opt-in.
• To maintain, debug, and improve the Service using operational logs and support requests.

4. Sharing with third parties

We share only what's necessary, only with vetted processors who handle it on our behalf:

• Payment providers — to process your payment. They receive a transaction amount and a reference, never the catalog item.
• Email delivery — to send receipts and one-time sign-in codes.
• Hosting and infrastructure — providers operating under data-processing agreements.
• Authorities — only when required by valid legal process.

We do not sell your data to advertisers or data brokers.

5. Cookies and similar tech

We use cookies and similar technologies for sign-in, checkout, security, and preferences such as language, region, and currency. With your consent, Yandex Metrica and Google Analytics also measure visits and traffic sources across all storefront pages, including sign-in, account, checkout, payment, and order/code access pages. These providers may receive page addresses and titles, referrers, campaign parameters and advertising click identifiers, browser/device information, and your connection's IP address. Session replay is disabled. You can decline or withdraw consent through Analytics settings in the footer. We do not enable advertising personalization or retargeting. See the Cookies Policy for details and provider policies.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data (subject to legal retention obligations).
• Export your data in a machine-readable format.
• Object to or restrict certain processing.

To exercise any of these, email support@a1.codes. We respond within 30 days.

7. Data retention

We keep order data for as long as needed to support the order and meet accounting obligations (typically 5–7 years). Account data is kept while your account is active. When you delete your account we remove personal identifiers and keep only what we are legally required to retain, in aggregated form.

8. Security

We use industry-standard encryption in transit and at rest, isolate sensitive systems, and run regular reviews. No system is perfectly secure — if you spot something off, email support@a1.codes.

9. Contact

Privacy questions, requests, or complaints: support@a1.codes. For order or account questions, use the same address. See Help for details.