Privacy Policy
Last updated June 26, 2026
This Policy explains what data we collect, how we use and protect it, in line with GDPR and Brazil's LGPD where applicable.
1. Data we collect
Account: display name, email and password (stored as a hash, never in plaintext).
Orders: game, service, chat messages and transaction history.
Game credentials (account-sharing): stored with envelope encryption (AES-256-GCM). The platform only decrypts them on the assigned booster's request and logs each access.
Payment: processed by third-party providers; we do not store wallet private keys.
2. How we use it
To operate the marketplace: create orders, mediate escrow, enable the service and communication between parties.
For security and anti-fraud, support and compliance with legal obligations.
3. Legal basis
We process data based on contract performance (providing the service), consent (where applicable) and legitimate interest in security and fraud prevention.
4. Sharing and providers
We use infrastructure providers (hosting and database) and a crypto payment provider. They process data only for the contracted purposes.
We do not sell your personal data.
5. Credential security
Account-sharing credentials never sit in plaintext in our database: a per-record data key encrypts the content, and that key is wrapped under a master key kept outside the database.
We recommend changing your account password after each order is completed.
6. Retention
We keep data for as long as needed for operations and legal obligations. Buyers can remove credentials at any time.
7. Your rights
You may request access, correction, deletion or portability of your data, and withdraw consent, as permitted by applicable law.
8. Contact
To exercise rights or ask privacy questions, contact platform support.
This document is an informational template and does not constitute legal advice. Have it reviewed by a lawyer before commercial use.