Privacy Policy

1. Introduction

PrimeKeys ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what personal data we collect when you visit primekeys.store (the "Site") and use our services, how we use it, with whom we share it, and the rights you have in relation to it. By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy. If you disagree with its terms, please discontinue use of the Site.

2. Information We Collect

We collect the following categories of personal data:

• Account data: Your email address, and optionally your name, when you register for an account or log in using a one-time password (OTP).
• Order data: Purchase history, product names, transaction identifiers, order totals, currency, timestamps, and delivered license key records necessary to fulfill your order and provide support.
• Technical and usage data: IP address, browser type and version, device type, operating system, referring URL, pages visited, and timestamps — collected automatically via server logs and standard web server infrastructure.
• Affiliate tracking data: When you arrive at the Site via an affiliate referral link (i.e., a URL containing a ?a= parameter), we store the affiliate's handle in a first-party cookie named pk_aff on your device. This cookie is used solely to attribute any resulting purchase to the correct affiliate for commission purposes. No personal data belonging to you is contained in this cookie.
• Communication data: Any messages or information you voluntarily provide when contacting our support team via support tickets or other channels.

We do not collect payment card numbers, bank details, or other traditional financial information. All payments are made in cryptocurrency. Your cryptocurrency wallet address may be collected by NowPayments solely to process refunds if applicable (see Section 4). We do not store full wallet addresses beyond what is operationally necessary.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• To process your orders and deliver digital products to you;
• To send order confirmation emails and make your purchased products available in your account dashboard;
• To authenticate your identity and maintain the security of your account session;
• To attribute affiliate commissions accurately when purchases are made through referral links;
• To respond to and resolve support requests, disputes, and inquiries;
• To detect, investigate, and prevent fraudulent transactions, abuse, and violations of our Terms of Service;
• To analyze aggregate usage patterns and improve the performance and functionality of the Site;
• To comply with applicable legal and regulatory obligations.

We do not use your personal data for advertising purposes, and we do not sell, rent, or trade your personal information to any third party for their own marketing use.

4. Payment Processing — Cryptocurrency via NowPayments

All payments on PrimeKeys are processed exclusively in cryptocurrency via NowPayments, an independent crypto payment gateway. When you initiate a checkout, NowPayments generates a one-time payment address and monitors the blockchain for your transaction. PrimeKeys receives a webhook notification from NowPayments when your payment is confirmed; we do not directly interact with the blockchain or hold custody of cryptocurrency funds at any point.

PrimeKeys does not collect, receive, or store your cryptocurrency wallet address as part of the normal checkout process. If you request a refund, you will be required to provide a wallet address so that the refund can be processed; that address is stored only for the purpose of completing the refund transaction and is not used for any other purpose.

NowPayments processes payment data under their own privacy policy and security standards. We encourage you to review NowPayments' Privacy Policy for details on how they handle transaction data.

5. Cookies and Affiliate Tracking

We use a small number of strictly necessary cookies to operate the Site. We do not use third-party advertising cookies, social media tracking pixels, or behavioral analytics cookies. The cookies we set are described in full in our Cookie Policy.

The pk_aff affiliate tracking cookie is a first-party cookie set on your device when you visit the Site through an affiliate referral link. It contains only the affiliate's handle (a short alphanumeric string) and expires after 30 days. It does not contain your personal data and is used solely to ensure the referring affiliate receives the appropriate commission if you complete a purchase within the cookie's validity window. This cookie is covered by our cookie consent banner, and you may decline optional cookies to prevent it from being set; however, doing so does not affect your ability to make purchases on the Site.

6. Data Sharing and Third Parties

We share your personal data only in the following limited circumstances:

• NowPayments (crypto payment gateway): To process cryptocurrency payments and confirm transaction status. NowPayments receives the order amount and a callback URL; no personal data about you is shared with them beyond what is technically necessary to fulfill payment.
• Email delivery providers: To send transactional emails such as order confirmations and OTP login codes. These providers are contractually prohibited from using your data for their own purposes.
• Cloud hosting and infrastructure providers: To host and operate the Site. These providers access your data only as necessary to maintain infrastructure.
• Legal requirements: If required to do so by applicable law, court order, or lawful request by a public authority, we may disclose your personal data to the relevant authority.

We do not sell, rent, or otherwise share your personal data with any third party for marketing, advertising, or data brokerage purposes.

7. Data Retention

We retain your account and order data for as long as your account is active and for a reasonable period thereafter, or as required to fulfil our legal, accounting, or regulatory obligations — typically up to seven (7) years for transaction records in accordance with applicable financial record-keeping requirements. Server and access logs are retained for up to ninety (90) days for security and debugging purposes. The pk_aff affiliate cookie expires automatically after thirty (30) days. You may request deletion of your personal data at any time (see Section 8); however, we may be required to retain certain records to comply with legal obligations even after account deletion.

8. Your Rights — GDPR and CCPA

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (European Economic Area and UK)

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data ("right to be forgotten"), subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data for certain purposes.

Under CCPA (California Residents)

• Right to Know: You have the right to know what personal information we have collected about you, how we use it, and with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. No opt-out action is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at privacy@primekeys.store. We will respond to all verified requests within thirty (30) days.

9. Security

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), secure session management with HttpOnly and Secure cookies, server-side session validation, and access controls limiting who can view your data internally. However, no method of transmission over the internet or electronic storage system is completely secure, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

10. Children's Privacy

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete that information. If you believe we may have collected data from a child under 13, please contact us at privacy@primekeys.store.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of the Site after changes are posted constitutes your acknowledgment of the updated policy.

12. Contact Us

For any privacy-related questions, requests, or concerns, please contact our privacy team at: privacy@primekeys.store. We aim to respond to all privacy inquiries within thirty (30) days.