Privacy policy
Last updated 14 September 2026
What we collect
Your full name, your mobile number or email address, the country your connection comes from, the orders you place, the payment details you send us (a bank transfer receipt, the name on your account, or the USDT transaction), and the usual server logs (IP address, browser, time).
Why
To sign you in with one-time codes, deliver your codes and send you order updates, match your bank transfer to your order, prevent fraud and abuse, keep accounts and tax records, and improve the store.
Who sees it
Our staff who process orders. Service providers we use to run the store: our hosting and DNS/CDN provider (Cloudflare), our SMS provider (for Maldivian numbers), our email provider, the banks and payment gateway we use to check transfers, blockchain data providers to detect USDT payments, and, for some gift cards, the supplier that issues the code. We never sell your data.
How long
Order and payment records are kept for as long as the law requires for accounting, normally five years. Sign-in codes expire within minutes and are never stored. Server logs are kept for a short period.
Your choices
You can ask us to correct or delete your account details, except records we must keep by law. Contact us through the help page.
Cookies and storage
We use a session cookie to keep you signed in and your browser's local storage for your cart, display currency and theme. No advertising trackers.
Where
Data is stored on servers we control and with the providers above, some of which are outside the Maldives. We are governed by the laws of the Republic of Maldives.