Privacy Policy

This is a demo project. The policy below describes how the demo handles the data you enter.

Data we store

Your account name, email, and a hash of your site password (handled by the authentication library). Orders and coin top-ups are stored so you can view your history.

Game credentials

For ID-PASS top-ups, the game username and password you enter are encrypted with AES-256-GCM before they are written to the database. They are decrypted only server-side to process a top-up, and the UI only ever shows a masked username hint.

Cookies

We use a session cookie strictly to keep you signed in. No tracking or advertising cookies are used.

Deleting your data

Deleting your account removes your sessions, saved credentials, orders, and top-up records (cascade delete).