Asked, answered.

No. Every order is a single-page checkout: pick the card, enter your email, pay in crypto, receive the code. We don't store passwords, sessions or login state — there is no account to forget.

That's where the gift code lands. The same email also opens your /orders page (live for 14 days after purchase) so you can re-find the code, request a refund or trigger a re-issue. Email is the single piece of contact data we keep.

No KYC for standard digital orders, regardless of amount. We do not ask for ID documents, address proofs, names or selfies. The code lands after one chain confirmation, no questions.

$5 USD-equivalent on most gift card brands; $10 on mobile top-up. The exact minimum is shown live on each product page in your selected coin and currency before you click pay.

$1,000 USD-equivalent per single order, applied automatically. For higher volumes (treasury, payroll-in-crypto, content-creator giveaways) the wholesale flow is available via /contact — flat reseller spread, monthly invoicing, payouts in your coin.

Yes. The site is a fully responsive web app — no install, no app store. Wallet deeplinks (BTC URI, USDT, ETH, etc.) open your wallet directly when you tap the QR or the Pay button.

Median 11 minutes from 'click pay' to 'code in inbox'. Roughly: ~30 seconds to broadcast and show the QR, 1–20 minutes for chain confirmation (depends on the coin), then 8–11 minutes for the brand provider to issue and email the code. Outliers happen during mempool spikes.

The brand's gift code (claim string), the original order number, a direct link to the brand's redeem page, and a link back to your /orders page on this catalog. No marketing, no third-party tracking pixels, no upsell links. From a no-reply address on our own domain.

Refresh /orders with your order number — it shows the live status (broadcasting / confirming / fulfilling / delivered). Bitcoin mempool spikes are the most common cause of slow confirms; either wait it out or contact us via /contact for a status check and rate-lock extension.

Check spam first. The delivery email comes from a no-reply address on our own domain (not a third-party SMTP). If still nothing after 30 minutes, /orders shows the same code with no email middleman — open it with your order number and the email used at checkout.

Email-only delivery means we never need a password, never need account-recovery flows, never need session cookies or device fingerprinting. Standard email is more reliable than building yet another login system, and it works on every device you already use.

No. The price you see on the product page is the price you pay — quoted in your chosen coin, no hidden surcharges, no fulfilment fee, no priority-delivery upsell. The only variable cost is the on-chain network fee, which goes to miners/validators (not to us).

Email address (so we can deliver the code), phone number on mobile top-ups only (so the carrier can credit the line), the crypto deposit address you paid from, and basic order metadata (which card, what amount, when, what status). That's the full list — no real name, no postal address, no IDs, no tax docs.

No third-party analytics, no behavioural-tracking pixels, no advertising remarketing tags, no session recorders. Two first-party UX cookies only: one for your locale, one for your display currency — both can be cleared via your browser at any time. No fingerprinting libraries.

Only what is strictly required to issue the code: the email address (so the brand-side fulfilment can deliver) and the order line. Never the wallet address, never the payment metadata, never your IP or browser data. We do not sell, rent, share or trade emails or phone numbers under any circumstance.

14 days for the order page to stay live. After that, the order is archived (anonymised, with the email replaced by a salted hash) for accounting/tax compliance per applicable jurisdiction. Phone numbers (mobile top-ups): 24 months, then hashed. We don't keep any of this longer than legally required.

Yes — request via /contact from the email used at checkout. We respond within 30 days per GDPR / UK GDPR / CCPA / LGPD / DPDP Act standards (whichever applies in your jurisdiction). The only exception: order data we are legally required to retain for accounting/tax — those are anonymised, not exposed.

Standard web-server access logs (IP, user-agent, request path, timestamp) on a 90-day rolling window unless flagged for security investigation. We don't link IPs back to email addresses or order data, and we don't use any third-party analytics products that profile users (Cloudflare edge metadata is the same access-log scope, kept under their privacy policy).