Privacy policy

1. Who we are

CryptoGift ("we", "us") runs cryptogift.app, a store where you can buy gift cards, eSIMs and mobile top ups with cryptocurrency, deposit USDT and USDC to an account wallet, and activate reseller plans.

For any privacy question or request, email support@cryptogift.app.

2. Data we collect

We only collect what we need to run your account and fulfil your orders:

• Account data from Google sign-in: your name, email address, profile picture and a Google account identifier. We never see your Google password.
• Profile choices: the name you set on your account and your newsletter preference.
• Orders: products, amounts, quantities, the coin you chose to pay with, order status and, for mobile top ups, the phone number and operator you enter.
• Wallet: the deposit addresses assigned to you and every deposit we detect (transaction hash, block number, time, amount, token, network and sender address).
• Plans and points: reseller plan purchases, wallet credits and debits, and points activity.
• Technical data: a session cookie that keeps you signed in, and standard server logs (IP address, browser and requested page) kept for security and troubleshooting.

We do not ask for ID documents today. If identity verification is required in the future to raise purchase limits or meet legal obligations, we will tell you what is collected before you submit anything.

3. How we use your data

• To create and secure your account and keep you signed in.
• To process orders, credit deposits, apply plan discounts and show your history.
• To detect fraud, abuse and security incidents, and to meet legal and regulatory duties.
• To send service messages about your orders and account, and our newsletter only if you turn it on.

We do not sell your personal data and we do not use it for third-party advertising.

4. Blockchain data

Deposits and crypto payments happen on public blockchains (BNB Smart Chain, Polygon and Solana). Transaction hashes, addresses and amounts are permanently public on those networks and cannot be changed or deleted by us or anyone else.

We link your deposit addresses to your account so we can credit you. Anyone who knows one of your addresses can see its on-chain activity.

5. Who we share data with

We share data only with services needed to run the store:

• Google, to sign you in.
• Blockchain RPC providers, which we query for public on-chain data about your deposit addresses.
• Price data providers, which we ask for exchange rates. No personal data is sent to them.
• Product suppliers, which receive only what is needed to deliver your order, such as the phone number for a top up.
• Our hosting provider, which stores our servers and database.

We may also disclose data when the law requires it, to protect our users or our service, or as part of a business transfer, in which case this policy continues to apply.

6. Cookies

We use only essential cookies: one that keeps you signed in for up to 30 days, and a short-lived one that protects the Google sign-in process. We do not use analytics or advertising cookies.

Because these cookies are required for the site to work, they cannot be turned off while you are signed in. Signing out removes the session cookie.

7. How long we keep data

We keep account data while your account is open. Order, deposit, plan and wallet ledger records are kept for as long as needed for accounting, tax, fraud prevention and legal purposes, even after an account is closed.

Server logs are kept for a limited period and then deleted.

8. Security

Data is sent over HTTPS, the session cookie is signed and not readable by scripts, and the database only accepts connections from our own server. Deposit address keys are never stored in the database.

No system is perfectly secure. If we learn of a breach that affects you, we will notify you as required by law.

9. Your rights and choices

• See and update your name and newsletter preference on the Account page.
• Delete your account from the Account page. Accounts with wallet deposits must be closed through support so balances can be settled.
• Ask us for a copy of your data, a correction, or deletion where the law allows, by emailing support@cryptogift.app.

We may need to verify your identity before acting on a request.

10. Children

CryptoGift is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you on the site or by email before it takes effect.