Privacy policy.

1. Data we collect

• Account data: email, hashed password, and optional Telegram identity.
• Order data: products purchased, prices, wallet and transaction history.
• Security data: session metadata such as IP address and user agent, and a log of each credential reveal.
• Support data: tickets and messages you send us.

2. What we do not do

• We do not sell your personal data.
• We do not run third-party advertising trackers.
• Our analytics, if enabled, are cookie-less and aggregate only — no cross-site profiling.

3. How we use data

We use your data to deliver products, process payments, provide warranty and support, prevent fraud and abuse, and meet legal obligations. Passwords are stored as bcrypt hashes; account credentials in our vault are encrypted with AES-256-GCM.

4. Cookies

We use a single essential, HTTP-only session cookie to keep you signed in. We do not use advertising or tracking cookies. Because our cookie is strictly necessary, no consent banner is required.

5. Sharing

We share data only with infrastructure providers needed to run the Service (hosting, database, email delivery, payment confirmation) and where required by law. These providers process data on our behalf under appropriate safeguards.

6. Retention

We keep data while your account is active and as needed to provide the Service. Some financial and audit records are retained longer to meet legal and anti-fraud obligations.

7. Your rights

• Access: request a copy of your data — we ship a ZIP within 7 days.
• Deletion: request deletion of your account and history, subject to records we must legally retain.
• Correction: update inaccurate information from your dashboard or by contacting support.

8. Contact

For privacy requests, contact support@rexopro.eu or @JaGoZar. We respond within a reasonable timeframe.