Privacy Policy

acc.forsale is committed to uncompromising privacy, cryptographic data protection, and absolute transparency regarding how information is handled. This Privacy Policy details our data minimization practices across our web storefront and Telegram bot (@accforsale_bot).

1. Principles of Data Minimization

We collect only the bare technical minimum required to facilitate order matching, cryptographic payment reconciliation, and digital fulfillment. We operate under a strict "fail-closed" security architecture designed to prevent data proliferation.

2. Information We Process

• Web Storefront Users: We generate ephemeral UUID session tokens stored locally to preserve your active shopping cart and order status. We do not require customer email addresses, real names, or identity verification documents for standard browsing.
• Telegram Bot Users: We store only your numeric Telegram User ID, display name, Telegram language code, and preferred shop locale to route catalog notifications and support tickets.
• Payment Telemetry: Blockchain transactions are tracked via public on-chain identifiers (deposit address, network transaction hash, and timestamp). We never collect, see, or store bank credentials, credit card details, seed phrases, or private cryptocurrency keys.

3. Cryptographic Storage of Order Deliverables

All sensitive delivery payloads (including passwords, two-factor authentication secret seeds, and authorization cookies) are encrypted at rest using industry-standard AES-256-GCM algorithms. Unencrypted secrets are decrypted solely in-memory at the exact instant an authorized customer accesses their order page.

4. Cookies and Local State Storage

Our web storefront utilizes strictly necessary session cookies to maintain your shopping cart across page navigation. Performance analytics cookies are strictly opt-in via our explicit consent banner and can be revoked at any time via /privacy/analytics-consent.

5. Third-Party Sharing and Data Sales

acc.forsale does not sell, lease, rent, or monetize personal data or telemetry to advertising networks, data brokers, or marketing affiliates. Necessary technical requests (such as Cloudflare CDN routing or RPC node balance queries) are isolated and carry zero customer personal identifiers.

6. Data Retention and Deletion Rights

Order history and encrypted fulfillment payloads are retained for a limited audit window to support warranty investigations, after which customers may request permanent cryptographic erasure through our on-site ticket system or Telegram /support command.