Privacy Policy
This policy explains how King of Mail (the "Site") collects, uses and protects your personal data.
1. Data controller
Your personal data is processed by King of Mail as data controller. Contact: [email protected].
2. Data we process
- Account data: name, username, email address and a one-way hash of your password (the password itself is never stored).
- Guest checkout: the email address you enter for the order.
- Transaction data: orders, balance history, delivered products and notification preferences.
- Payment data: amount, crypto currency, network and payment status. No card details are collected; wallet transactions take place at the payment provider.
- Technical data: IP address, browser information and security logs (to prevent abuse and brute-force attacks).
- Communications: messages you send to support.
3. Purposes and legal bases
We process your data to create and fulfil your account and orders, take payments, deliver products, send notifications and provide support, prevent fraud and abuse, and comply with legal obligations. The legal bases are the performance of a contract, legal obligations and our legitimate interests.
4. Sharing
We share data only as needed to provide the service: with our payment provider (Cryptomus), email delivery and hosting providers, and with authorities when legally required. Some providers may be located abroad. We never sell your data for marketing.
5. Retention
We keep your data while your account is open and afterwards for the periods required by law, then delete or anonymize it.
6. Cookies and local storage
The Site does not use advertising or analytics cookies. Only data needed for the Site to work (session, theme preference, pending payment) is kept in your browser's local storage.
7. Security
Passwords are stored as one-way hashes, connections are encrypted (HTTPS), admin access is restricted and rate limits protect against brute-force attacks.
8. Your rights
You may ask to access, correct or delete your personal data, ask how it is used and with whom it is shared, object to processing, and ask for a copy of your data. Send requests to [email protected] from the email registered to your account. We reply within 30 days.