What we store, and when it’s gone.

We built this so there’s almost nothing to leak. Here’s everything.

What we keep about an order

• A random order ID and what you bought, priced in dollars.
• A hash of your private link, not the link itself. Without the link, nobody can open your order page, including us.
• The gift link or code, encrypted. It’s deleted 7 days after you first reveal it.
• An X @handle, only for X Premium gifts, because X needs it.
• A recovery email or passphrase, only if you add one. Encrypted, and deleted when your order is delivered.
• A refund address, only if you add one. Encrypted.

Finished orders are deleted completely after 30 days. Unpaid orders are deleted after 48 hours. You can erase a finished order yourself at any time from its page.

What we never collect

• No name, no account, no password, no card.
• No cookies for buyers, no analytics, no tracking pixels, no third-party scripts or fonts.
• Your IP address is never written to our database or application logs. We use it in memory only, scrambled, to stop abuse.

Who else sees anything

• Cloudflare, our CDN, processes your IP address to deliver pages and block attacks.
• Our payment server sees the order ID and the amount. It’s self-hosted BTCPay Server, not a third-party processor.
• The blockchain is public. Your payment transaction is visible to anyone, as with any crypto payment. Monero hides the amount and the sender.
• The vendor (Anthropic, OpenAI, X, Microsoft…) sees our purchase, not you. When you redeem the gift, you deal with the vendor directly, under their privacy policy.