This page explains, in plain terms, how BuyAdsCard ("we") handles personal information when you browse buyadscard.com, sign up, order a card or talk to our team. If anything here is unclear, write to [email protected] and a person will answer.
In brief
- We only gather the information required to operate your account, confirm payments, issue cards and keep things secure.
- We don't sell personal information, and we don't run third-party advertising on your data.
- Card secrets and sign-in secrets are encrypted. Staff can't see them without leaving a trace in our logs.
- You can ask for a copy of your data, a correction or deletion, within the limits the law sets.
What we collect and why
| Information | Examples | Why we need it |
|---|---|---|
| Account | Name, email, sign-up date, email confirmation, a one-way hash of your password | To create and run your account |
| Sign-in security | Your authenticator secret and recovery codes (encrypted); time, IP address, browser, system and device of each sign-in attempt | To protect the account and alert you to unfamiliar devices |
| Orders | Card balance ordered, fees, payment method, the reference and amount a payment provider reports, or the transaction ID and optional screenshot you submit | To confirm payments and review orders |
| Cards | Number, security code, expiry, holder name, billing address, balance — the first three stored encrypted | To deliver the card to you, and only you |
| Refunds | Your reason, payout address and payout network | To decide and send refunds |
| Conversations | Support tickets, contact-form messages and our answers | To help you |
| Server logs | IP address, page, time, browser type | Security and fixing problems |
Our legal grounds are the contract with you (running the account and delivering cards), our legitimate interest in preventing fraud and abuse, and legal duties such as bookkeeping.
Emails we send
Confirmation links, order and card updates, refund outcomes and security warnings are part of the service. You'll receive them for as long as the account is open. We don't send marketing newsletters unless you ask for them.
Who else sees your data
- Card-issuing partners — only what they need to issue, freeze, close or refund a card.
- Payment providers whose hosted checkout you choose. They receive your name, email, order reference and amount. Whatever you type on their page is covered by their own privacy terms.
- Infrastructure companies that host the website, store the database and deliver email, bound by contracts to keep it confidential.
- Bot protection (for example Cloudflare Turnstile) on the forms for registration, signing in, password resets and contact.
- Authorities when a law, court or regulator requires it, or to report fraud and protect other customers.
- A new owner of the business, should that ever happen, on the same terms as this policy.
Advertising platforms receive nothing from us. Whatever a platform knows about you comes from your own account with it.
Payments on public blockchains
Crypto transfers are written to public ledgers. A wallet address and the amount sent there are visible to anyone and cannot be edited or erased by us or by you.
How long data is kept
| Data | Kept for |
|---|---|
| Account, order, card and refund records | While the account exists, then as long as accounting, tax and anti-fraud rules demand — typically five to seven years |
| Sign-in history | 180 days |
| Payment screenshots | Until the order and any related dispute are closed |
| Contact-form messages from non-customers | Up to two years |
How it's protected
Every page is served over HTTPS. Authenticator secrets and card secrets are encrypted at rest, two-factor sign-in is compulsory for customers and staff, staff access depends on their role, uploaded files sit in private storage, sensitive requests are rate-limited, and staff actions go into an audit log. Nothing online is risk-free; if a breach ever affects you, we'll tell you and any authority we're obliged to inform.
Your choices and rights
Depending on the law where you live, you may ask us to:
- send you a copy of your personal data;
- fix anything that's wrong;
- erase it — except records the law makes us keep;
- limit or stop certain uses;
- hand it over in a portable format.
Email [email protected] from your account's address so we know the request is genuine. You're also free to complain to the data-protection regulator in your country.
Cookies
Only functional cookies are used: one keeps you signed in, one blocks forged form submissions, and the bot-protection service may set its own when it runs. A payment provider's page may add cookies of its own. No advertising or cross-site tracking cookies are set by us.
Processing in other countries
Some providers operate outside your country. Where the law asks for it, transfers rely on recognised safeguards such as the European Commission's standard clauses.
Age limit
The service is only for adults. If we learn that someone under 18 has signed up, we close the account and delete what we can.
Updates to this policy
Changes are published here with a new "last updated" date. For important changes we'll also send a notice by email or post one in your dashboard.