Privacy policy
We collect the little we need to deliver an order, and nothing to profile you. There is no analytics script on this site.
Who is responsible
Djali et fils LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States, is the controller of the data described here. Email support@claudestore.us about anything on this page.
What we collect
Your email address. It is how we deliver your code, send your invoice, and sign you in. It is required for an order and for nothing else.
Your orders and, if you hold one, your wallet balance and its ledger — the record of every credit and debit on your account.
Your language preference, stored in a cookie once you choose one.
If you sign in with Google, we receive your email address and basic profile from Google. We do not receive your password, contacts, or anything else in your Google account.
What we do not collect
No analytics, advertising or tracking scripts run on this site. There is no Google Analytics, no advertising pixel, no session recorder, no fingerprinting.
We do not ask for your name, address, phone number, date of birth, or identity documents.
We never see your card details, because we do not accept cards. We never see the contents of your API traffic when you buy API credit — the credit goes onto your own key.
We do not sell, rent or share personal data with anyone for their own purposes, and we never will.
IP addresses
To stop someone flooding the site with sign-in requests or orders, we count recent requests per email and per IP address. Both are stored as one-way SHA-256 hashes, never as readable values, and the counters are deleted a couple of hours later.
Our host records standard server logs for security and reliability. We do not build profiles from them.
Cookies
A session cookie when you sign in, readable only by the server. A small companion cookie so the page knows whether to ask for your balance. A cookie remembering your language, only after you pick one.
That is the complete list. There are no advertising or analytics cookies, which is why this site has no cookie banner to dismiss.
Who processes data for us
Supabase — database and sign-in. Resend — email delivery. NOWPayments — crypto payment processing; they receive the amount and our order reference, and handle the payment itself. Vercel — hosting. Google, only if you choose to sign in with Google.
Each processes data on our instructions to run the service. None of them receives data for their own marketing.
How long we keep it
Order and payment records are kept as long as tax and accounting rules require. The wallet ledger is append-only by design: entries are never edited or deleted, because a balance you can dispute is only as good as the record behind it.
Rate-limiting counters are deleted within hours. Sign-in links expire after fifteen minutes and work once.
Your choices
You can order as a guest, without an account, always.
You can ask for a copy of your data or for your account to be deleted — from Settings in your account, or by emailing support. A balance must be withdrawn first; we will not close an account while we are still holding your money.
Deleting an account removes your sign-in identity. Order records are retained where the law requires it.
Changes
Changes are posted here with a new date. If we ever start collecting something new, this page says so before it happens, not after.