Privacy
policy.

1. The short version

We collect what an order needs and nothing else. There are no advertising cookies on this site, no cross-site tracking, and no profile of you is built or sold. The sensitive part, the account details some upgrades require, is encrypted before it is stored and deleted 7 days after your order is delivered.

2. What we collect when you order

At checkout we take your email address, your Discord username if you give one, any note you add, and the usual order record: what you bought, the total, which payment method you chose, and the time. We also log the IP address the order came from, which is used to stop card testing and bulk abuse and for nothing else.

3. Account details for upgrade products

Some products upgrade an account you already own, such as a Spotify or YouTube plan. Those ask for the email of the account to upgrade, and a few of them ask for the password as well. This is the most sensitive thing on the site, so it is handled separately from everything else:

• It is only asked for on products that genuinely cannot be delivered without it. The product page tells you which detail it needs before you add anything to the cart.
• It is encrypted the moment it is saved, using libsodium secretbox. The key is kept in a server configuration file outside the database, so a stolen copy of the database does not open it.
• It never appears in an email, never goes to Discord, never comes back through the site's API, and is never written to a log.
• It is deleted 7 days after your order is marked delivered.
• If your order is cancelled, fails, is refunded or is deleted, it is destroyed immediately rather than waiting out the 7 days.

You are asked to tick a box confirming you want us to use those details before the order goes through. If you would rather not hand over a password, buy a product that delivers a fresh account or a key instead.

4. What we send you, and how long we keep it

Delivery details, meaning the key, login or code you paid for, are encrypted on the order and also sent to you by email. Keep that email or save the details somewhere safe, because the copy held on the order is deleted 30 days after delivery.

5. Payment

Crypto payments go through NOWPayments, which handles the transaction on its own systems. Card numbers, wallet keys and seed phrases never touch this site, because we never ask for them and have nowhere to put them. For the manual methods you send payment yourself and give us a reference, so all we hold is that reference.

6. Discord

King Store runs a Discord server, and the shop is connected to it. If you give a Discord username at checkout, this is what happens:

• A record of the order is posted to a staff only channel. It holds the order number, the items, the total, the payment method, the time, your Discord username, and your email with most of it hidden, shown as the first letter then the domain.
• Account details and delivery details are never sent to Discord, in any channel, in any message, including direct messages.
• You get a message when the order is delivered.
• You are given the role that opens the channel for what you bought. When the access term for that product runs out, the role comes off again. Anything sold outright, such as a lifetime licence or a retail key, keeps its channel.

Matching is done on your Discord username alone. Give the wrong one and someone else could receive the role, so check it before you pay. Discord is a separate company and their handling of your data is covered by their own privacy policy.

7. Vouches

If you leave a vouch, it can be republished on this site with your display name or Discord handle, your rating, what you wrote, and the date. Avatars from other platforms are not hotlinked; your initials are shown instead.

We do not write vouches for customers. If you buy something and leave no review, no review appears. Nothing is generated, padded or bought.

8. How long everything is kept

9. Your rights

You can ask for a copy of what we hold about you, ask for it to be deleted, or ask for a vouch to be removed. Ask through the support page or in the Discord server and say which order it concerns.

A data export gives you your order history, the masked form of your email, and your Discord handle. A deletion request removes the account details, the masked email and the handle from your orders. Where the law requires us to keep a financial record of a sale, that record stays, with the personal detail stripped out of it.

10. Cookies

This site sets cookies for the cart, the checkout session, and staying logged in to your orders page. Those are required for the shop to work at all. There are no advertising cookies and no third party tracking pixels.

The saved cart feature is switched off deliberately, so account details can never sit in a stored cart attached to your user profile.

11. Who else sees your data

• NOWPayments, for crypto payments.
• Discord, for the staff order record, the delivery message and role access.
• Our hosting provider, which stores the site and its database.

Your data is not sold, rented or passed to advertisers.

12. Security

The site runs over HTTPS. Account details are encrypted at rest with a key held outside the database. Staff actions on an order are recorded against the staff member who made them. No system is perfect, so if you believe an order has been interfered with, open a ticket in Discord and we will look at the record.

13. Children

This shop is not intended for anyone under 13, and we do not knowingly hold data about children. If you believe we do, tell us and it will be deleted.

14. Changes

When this policy changes, the date at the top changes with it. The current version is always the one on this page.