Privacy Policy
Last updated: 2026-09-22
This policy explains what personal data ACARDO (acardobts.com) collects, why, and what control you have over it.
Core Privacy Policy Provisions
Full official primary policy text of ACARDO
1Data we collect
- Account: your email address, a display name, and — if you use one — a password stored only as a salted scrypt hash (we cannot read it).
- Sign In With Google: when you choose it, Google shares your email address, name and a Google account identifier with us. We do not receive your Google password or access to your Google data.
- Orders and wallet: the items you buy, amounts, order status, the codes delivered to you, and your wallet balance and transactions.
- Details you type at checkout for orders that need them (for example a game account ID), and messages you send to support.
- Security logs: IP address, time and outcome of requests such as sign-ins, used to protect accounts and prevent abuse.
2Payments
- Card and Qi Card payments are processed on the ha55a payment page. We never ask for, see or store your card details. ha55a tells us whether a payment succeeded and its amount.
- Payments confirmed through WhatsApp or bank transfer are recorded against your order.
3Cookies and local storage
- One essential cookie keeps you signed in (httpOnly, secure). A short-lived cookie protects Google sign-in against misuse.
- Your browser stores your cart, language and theme locally. We use no advertising or tracking cookies.
4How we use your data
- To create and secure your account, process and deliver orders, keep your wallet correct, answer support requests and prevent fraud. We do not sell your data.
5Sharing
- Only with the services needed to run the store: our hosting provider (Hetzner, Germany), ha55a for payments, Google for sign-in when you choose it, and WhatsApp when you contact us there.
6Retention
- Account and order records are kept while your account exists and as required for accounting. Security logs are rotated. Backups are kept for 30 days.
7Your choices
- You can update your details in your account, and ask us to delete your account at any time. Deleted accounts are anonymised; order records needed for accounting are kept without your personal details.
Questions or requests: contact us through the contact page.
Additional Privacy & Data Protection Provisions
Supplementary legal terms and technical operational disclosures.
A. Voluntary Information Submission & Accuracy
All personal information provided during account registration, customer profile updates, support communications, or checkout forms is submitted voluntarily. Customers represent and warrant that all submitted details are accurate, lawful, and that they possess the necessary authority to provide them.
B. Digital Services & Encrypted Activation Data
Where a purchased digital product or service specifically requires customer-provided details for activation or remote setup (such as a device operating system, software version, or account username), such details are protected at rest using AES-256-GCM encryption. Customer activation secrets are accessible only to authorized administrators for fulfillment purposes and are systematically purged from our database within 7 days following delivery, or immediately upon cancellation or refund.
C. Strict Prohibition on Submitting High-Risk Credentials
Customers must never submit unnecessary high-risk credentials. Under no circumstances should you ever submit your banking passwords, payment card PINs, one-time passwords (OTP), two-factor authentication (2FA) recovery codes, or private email master passwords. ACARDO reserves the right to immediately delete or redact any inappropriately submitted financial or private credentials.
D. Third-Party Payment Gateway Architecture
Card and Qi Card transactions are executed entirely within certified third-party payment gateways (including ha55a). ACARDO does not directly process, transmit, capture, or store raw credit card numbers, CVV security codes, or banking credentials on its proprietary servers. Transaction records maintained by ACARDO are limited to non-sensitive settlement references, payment status, amount, and timestamp.
E. Technical Security Safeguards & Public Network Disclosures
ACARDO implements standard technical safeguards, including HTTPS TLS encryption in transit, salted scrypt password hashing, AES-256-GCM secret-box encryption at rest, rate-limiting, and brute-force defenses. However, no electronic storage system or transmission over the public Internet can be guaranteed to be 100% impenetrable. ACARDO does not guarantee absolute immunity against all conceivable cyber threats.
F. User Privacy & Security Responsibilities
Users are strictly responsible for preserving the confidentiality of their account credentials, employing strong and unique passwords, securing their personal devices and email accounts against unauthorized access, and immediately notifying ACARDO support of any suspected account compromise.
G. Minors & Age Requirements
In alignment with Section 9 of our Terms of Service, ACARDO is intended for users who are at least eighteen (18) years of age or the age of legal majority in their jurisdiction. Minors under 18 may only use the platform under the active supervision of a parent or legal guardian.
H. International Processing & Datacenter Infrastructure
ACARDO services are hosted on enterprise datacenter infrastructure provided by Hetzner Online GmbH in Germany (European Union). By using ACARDO, you acknowledge that your information is processed and stored in these secure facilities in accordance with applicable technical standards.
I. Lawful Disclosures & Anti-Fraud Cooperation
ACARDO may preserve or disclose necessary transaction records when strictly required to do so by valid, binding legal process issued by competent judicial authorities, or when reasonably necessary to investigate payment fraud, cyber attacks, or violations of platform rules.
J. Business Restructuring & Transfers
In the event of a merger, acquisition, corporate reorganization, or sale of assets, customer accounts and transactional records may be transferred to the successor entity, which shall remain bound by the commitments in this Privacy Policy until an updated policy is published.
K. Amendments & Policy Updates
ACARDO reserves the right to update this Privacy Policy as services, technologies, and regulatory requirements evolve. Updated versions become effective immediately upon posting to this page, with an updated "Last updated" date displayed at the top.
Official Privacy Inquiries & Support
Questions or requests: contact us through the contact page to contact our privacy and customer support desk.