Privacy Policy

SubVaults (subvaults.com) is run by SubVaults, an independent business based in Lebanon. We decide what personal data is collected and how it is used, so we are the one responsible for it. Contact: support@subvaults.com or Telegram @haydar_hamedeh.

• Account details: your email address, your chosen username and, if you sign in with Google, the basic profile Google shares (name and email). Passwords are handled by our sign-in provider and are stored hashed; we cannot read them.
• Order details: what you bought, the amount, any promo code, the order status and the keys we delivered to your vault.
• Payment details: for a USDT payment, the transaction hash, the amount and the sending wallet address. These are public on the blockchain. We do not collect card or bank details.
• Vault level data: XP and level progress from your paid orders.
• Basic usage data: pages visited, device and browser type and page-speed measurements, collected in aggregate by our analytics tools.
• Messages: anything you send us when you report a problem.

• To run your account, take your order and deliver your keys.
• To match your crypto payment to the right order.
• To handle warranty claims, refunds and support.
• To prevent fraud, promo-code abuse and misuse of the store.
• To keep order and payment records we may be required to keep.
• To understand how the site is used and keep it fast and working.

We do not sell your personal data. We share only what is needed with the services that help us run the store:

• Hosting, database and sign-in providers that store your account and orders and serve the website.
• Google, only if you choose to sign in with Google.
• Analytics and performance tools that report on site usage and speed without advertising profiles.
• Our wholesale suppliers, who receive the product, the quantity and an order reference so they can supply the key. They do not receive your name or email.
• Blockchain network: payments are public by nature, and we read them through a network node provider.
• Authorities, where the law requires it.

We use only what the store needs to work:

• Sign-in session cookies that keep you logged in.
• Browser storage that remembers your cart on your own device.

We do not use advertising or cross-site tracking cookies.

We keep your account for as long as you have it, and your orders and keys stay in your vault so you can access them later. We keep order and payment records for as long as needed for support, fraud prevention and any legal or accounting duty.

TODO: confirm retention periods for orders and payment records

Depending on where you live, you may have the right to see the data we hold about you, correct it, ask us to delete it, or object to how we use it. To use any of these, contact us: support@subvaults.com or Telegram @haydar_hamedeh.

Some records, such as completed orders and payment records, may need to be kept even after an account is closed, and we will tell you when that applies. Blockchain transactions cannot be erased by anyone.

We protect your data with encrypted connections, access controls and a payment flow that never handles card numbers. No online service is perfectly secure, so please use a strong, unique password and keep your vault login private.

We serve customers worldwide, and our providers may process data in other countries, including outside your own.

The store is not meant for children under 18, and we do not knowingly collect their data.

TODO: confirm your legal basis wording and data-transfer mechanism if you sell to the EU or UK

We may update this policy when the store changes. The date at the top of the page shows the latest version.