Privacy notice

• Account data: username, email address, a protected form of the password, whether the email address has been confirmed, and a role where the person is staff or a reseller.
• Contract data: the key, the product, the time of redemption, and the fact of delivery, so the same key can be redeemed again and a failed delivery can be replaced.
• Security data: IP address, the coarse location reported by the network that serves the site, browser type, and the outcome of a sign-in. This is used to protect accounts. It is not sold.
• Correspondence: messages the Buyer sends about the EliteKeys account, and the replies.
• Mail: the address used for account messages, and whether the Buyer has opted out of optional mail. Messages required for security, such as a sign-in code, are still sent when the account is used.
• Payment data, on a reseller checkout: the payment reference, amount, currency, and status returned by the payment provider. EliteKeys does not receive a wallet recovery phrase and does not take card numbers.

EliteKeys does not sell personal data and does not pass it to advertisers. It is handled by the providers that host the website, store the records, operate sign-in, send account email, and process cryptocurrency checkout, and by personnel who need it to perform the contract. Those providers may process data outside the Buyer’s country.

EliteKeys does not use the Buyer’s data to train a model and does not build a marketing profile from what the Buyer redeems.

Account data is kept while the account is open. Contract data is kept while the key can still be redeemed or replaced, and afterwards for so long as needed to answer a dispute about what was supplied. EliteKeys will not delete a delivery record while the key is still in force, because that record is how a replacement is made. Security records are kept for so long as needed to detect repeated misuse.

The Buyer may correct an email address from the profile page. The Buyer may ask for the account to be closed by a ticket about the EliteKeys account. EliteKeys will delete or detach what can be removed without breaking a key that is still in force. Where the law requires a payment record to be kept, that record is kept and nothing wider.

Optional email may be stopped with the unsubscribe link in the message. That link does not open a refund request. Security messages are still sent when the account is used.