Privacy policy

Last updated October 1, 2026

1. 1. What we collect

   • Account details: username, email, display name, country, a hashed password, and your selected WhatsApp number or Telegram username for private account contact.
   • Orders, messages, files and evidence you exchange on the platform.
   • Payment records: amounts, methods and, for crypto, the transaction hash and the addresses you give us.
   • Identity documents, when you verify to sell or withdraw.
   • Technical data: IP address, browser and the times you sign in, used for security and fraud checks.

2. 2. How we use it

   To run your orders and escrow, pay sellers, resolve disputes, prevent fraud, meet legal duties, and send you messages about your account and orders. We do not sell your data.

3. 3. What is protected in storage

   Delivered secrets (licence keys, logins, vault notes and files) and payout details are encrypted. Identity documents and private files are kept outside public storage and are only opened by authorised staff, which is recorded in an audit log.

4. 4. Who sees it

   The other side of an order sees your username, public profile and what you share in the deal room. Payment providers see what they need to process a payment. Your private WhatsApp or Telegram contact is not shown to other buyers or sellers. Authorised staff can review flagged conversations to enforce our on-platform communication rules. Staff see what their role requires. We share data with authorities only when the law requires it.

5. 5. How long we keep it

   Order and payment records are kept for as long as financial and tax rules require. You can close your account at any time; we then remove or anonymise what we do not need to keep.

6. 6. Your choices

   You can update your profile, turn email notifications on or off in settings, and ask for a copy or deletion of your data by writing to [email protected].

7. 7. Optional advertising measurement

   Only with your permission, we send Meta shopping events such as product views, cart additions, checkout starts and confirmed purchases. Events can include product identifiers, amounts, currency, an advertising click or browser identifier, browser information and IP address, and a SHA-256 representation of your verified SocialBlast account email and account identifier when signed in. Hashing does not make these identifiers anonymous. Meta may use them for ad measurement, audience matching and relevant advertising. Mail Checker credentials and messages, private chats, inventory secrets, OTPs and URL queries/fragments are excluded. We use server-side events without a Meta browser script. Pending event and checkout matching data are encrypted and removed within seven days; successfully sent event payloads are cleared immediately. Delivery metadata lasts up to 30 days. Withdrawing stops queued and future events for this browser, but cannot recall data already sent to Meta. Meta applies its own privacy and retention policies.

8. 8. Cookies

   We use essential cookies for sign-in, form security and remembering your privacy choice. When advertising measurement is configured, you may opt in to a 180-day marketing identifier. Use Ad privacy on public shopping pages or this page to decline or withdraw. Browser Global Privacy Control and Do Not Track signals block advertising measurement.