ACCSFORGE / INFORMATION
Privacy Policy
An overview of account information, preferences and the services involved in operating the marketplace.
Draft for review. Illustrative content only. Merchant identity, contact information and final policies must be completed before launch or submission for banking approval.
Who handles your information
The data controller's legal identity, address and privacy contact must be added before launch. This page is an illustrative notice and has not been finalized for the operating business.
Account and order information
The application stores account details, password hashes, wallet operations, purchases and submitted support claims. Profile preferences may also be stored. Final purposes, legal bases and retention periods for each category will be documented by the operator.
Credential delivery and support
Credential reveals record the first reveal time and the IP address supplied by the request infrastructure. Disputes store private messages and submitted image evidence; image metadata is stripped before storage. Partner referrals record attribution and earnings. A referral link sets a 30-day attribution cookie. Retention periods and access-review procedures must be finalized before launch.
Warranty evidence assistant
When enabled, OpenAI receives submitted warranty messages and the image or sampled video frames you submit for evidence review. The original website video and its audio are not uploaded. Discord video review requires an explicit !review message with the attachment. Do not submit passwords, recovery codes or personal information. AI assists staff; it cannot issue refunds or change the recorded warranty timing. You can ask for a staff review.
Bot protection
When configured, Cloudflare Turnstile checks sign-in, registration and password-recovery requests. Cloudflare processes technical information necessary to distinguish automated requests. Its challenge is a security control, and our server validates its result before allowing the request.
Email verification and signup protection
Registration sends a one-use code through Resend. Codes expire after 10 minutes; only a keyed hash is stored. Expired challenges are cleared as new codes are issued. Signup limits use temporary keyed network and email counters. Known disposable-mail domains are blocked. Gmail dot and plus aliases share one registration identity; your login email is unchanged. These checks reduce automated signup and reward abuse. Contact support if a legitimate registration is blocked.
Service providers
Payment providers process payments and external suppliers provide listings and account delivery. When configured, Discord receives administrative alerts with user IDs and transaction details, not passwords or delivered credentials. The final notice must identify processors, international transfers and applicable safeguards.
Privacy requests
The operator must provide a working contact and procedures for privacy requests, account deletion and applicable data rights before launch. Do not send passwords, payment card details or purchased credentials with a support request.