An email address to send a code to. That is the whole of it. No account required, no card, no name, no address, no trackers.
This is the least data any of our storefronts needs
A gift card is a code. Nothing has to be shipped, nothing has to be provisioned, and nobody has to be identified. So the only thing an order genuinely requires is somewhere to send the code besides the browser tab you are currently in.
An email address. For the code and the order link. You could use a disposable one and the order would work — though you would lose the ability to find the order again if you lost the link.
The order record. Which card, which amount, which coin, the deposit and settlement transaction identifiers, and which code was issued against it. The last part is unavoidable: without it we cannot tell whether a code you report as faulty was actually yours.
A coarse country code supplied by our CDN with the request, used to understand where demand comes from. Not an IP address.
What we do not collect
No name. No address. No phone number. No card or bank details, since we take no card payments. No identity documents. No advertising trackers, no third-party analytics, no cross-site pixels.
How the codes themselves are stored
Encrypted at rest with AES-256-GCM, under a key that is not in the database. A copy of the database alone is therefore not a stack of usable gift cards, which is the only sensible way to hold inventory like this.
Accounts, if you want one
Optional, and nothing requires one. If you create one we store the email and a bcrypt hash of the password — never the password. The point of it is that your codes stay findable; deleting the account removes the login, and the order records remain because they are the record of a sale that happened.
Who else sees anything
Our payment processor sees the swap, because it performs it: amounts, coins, addresses. Our email provider sees the address a message goes to. Nobody else, and we do not sell or share anything with anyone.
How long we keep it
Order records for as long as accounting requires. We do not delete a delivered code's record, because that is what lets you come back to your order page in a year and still find it.
Asking us about your data
{{supportLine}} With an order code we can tell you exactly what is on file against it.