Privacy Policy

This policy explains how King of ACC (the "Site") collects, uses and protects your personal data.

1. Data controller

Your personal data is processed by King of ACC as data controller. Contact: [email protected].

2. Data we process

• Account data: name, username, email address and a one-way hash of your password (the password itself is never stored).
• Guest checkout: the email address you enter for the order.
• Transaction data: orders, balance history, delivered products and notification preferences.
• Payment data: amount, crypto currency, network and payment status. No card details are collected; wallet transactions take place at the payment provider.
• Technical data: IP address, browser information and security logs (to prevent abuse and brute-force attacks).
• Communications: messages you send to support.

3. Purposes and legal bases

We process your data to create and fulfil your account and orders, take payments, deliver products, send notifications and provide support, prevent fraud and abuse, and comply with legal obligations. The legal bases are the performance of a contract, legal obligations and our legitimate interests.

4. Sharing

We share data only as needed to provide the service: with our payment provider (Cryptomus), email delivery, hosting and site statistics providers (Cloudflare; Google Analytics if you consent), and with authorities when legally required. Some providers may be located abroad. We never sell your data for marketing.

5. Retention

We keep your data while your account is open and afterwards for the periods required by law, then delete or anonymize it.

6. Cookies and local storage

Data needed for the Site to work (session, theme preference, pending payment, your cookie choice) is kept in your browser's local storage. The Site does not use advertising cookies.

• Cloudflare Web Analytics: used for aggregate statistics such as page views; it sets no cookies, does not track you across sites and builds no personal profile.
• Google Analytics 4 (optional): loaded only if you click Accept in the cookie banner (consent, GDPR Art. 6(1)(a)). It collects anonymous statistics such as pages visited, device/browser type, approximate location and purchase amounts; IP addresses are truncated by Google. No name, email, username or order link is sent; advertising features and Google signals are off. _ga cookies are kept for up to 2 years. Google LLC is located in the United States.

You can withdraw consent at any time via the Cookie preferences link at the bottom of every page; if you decline, Google Analytics is not loaded and its cookies are deleted.

7. Security

Passwords are stored as one-way hashes, connections are encrypted (HTTPS), admin access is restricted and rate limits protect against brute-force attacks.

8. Your rights

You may ask to access, correct or delete your personal data, ask how it is used and with whom it is shared, object to processing, and ask for a copy of your data. Send requests to [email protected] from the email registered to your account. We reply within 30 days.