Privacy Policy

What we collect

• Email address: required for order delivery and support
• Recipient phone number: for mobile top-ups only, because it is the number being topped up
• Blockchain transaction data: public by nature of crypto payments
• Order history: stored to resolve disputes and provide receipts
• IP address: used for fraud prevention and rate limiting. It is not stored in our order database.

What we do not collect

• No credit card or bank information
• No government ID. CardsRelay does not ask for identity verification at any order value. Some card issuers, mainly for prepaid Visa and Mastercard products, run their own identity checks when you activate or redeem the card. That check is the issuer's, not ours, and where we know a product requires it we say so on the product page.
• No browsing history, tracking pixels or advertising cookies

How we use your data

We use your email solely to deliver gift card codes and send order confirmations. We do not sell your data to third parties or use it for advertising.

Analytics and cookies

We use self-hosted, cookieless analytics that counts page views and checkout steps without personal data: product viewed, coin selected, checkout started, purchase completed, and searches started, recording only which part of the page the search came from. It records which product and which coin, never what you search for, your email, your order number or the amount. If you arrive from one of our ads, we also record the campaign tag in that link (which ad it was, nothing about you), and an order placed in the same browser tab records that tag too. The tag is kept in your browser only until the tab closes. It respects your browser's Do Not Track setting. We do not use Google Analytics or any other third-party tracker, and our fonts are served from our own domain.

The cookies we set are functional only: keeping your checkout session, remembering that your email is verified, and remembering a referral link you arrived through.

Who else processes data

• Payment processing: depending on the coin you choose, a third-party crypto payment processor receives the payment amount, the coin and our order reference. No payment processor receives your email. Some coins, including Monero, are paid straight to our own wallets with no processor involved.
• Gift card and top-up fulfilment: the wholesale suppliers we buy cards and top-ups from receive the product, the amount and our order reference. For mobile top-ups, the top-up supplier also receives the phone number being topped up, both to detect the operator and to deliver the credit. Your email is never passed to a supplier.
• Email: an email delivery provider sends our order emails, and a mail host holds our support mailboxes, including any email you send us.
• Hosting and security: the website runs on a hosting and content delivery network, which sees your IP address as part of delivering the site and blocking abuse. Orders are stored on our own servers in Germany.

Data retention and deletion

We keep order records, including the delivery email, for as long as we need them for refunds, disputes, fraud prevention and accounting. You can ask us to delete the email address and order records linked to your purchases by emailing [email protected]. We will confirm once it is done. Records we must keep for dispute handling or legal reasons are kept only for as long as that requires.

Security

Gift card codes are stored securely and are only revealed to the buyer after payment confirmation. Payment addresses are generated per-invoice and not reused. All data is transmitted over encrypted connections.

Data controller

The data controller is Payzy ME FZ Ltd, Unit 207, Heritage Plaza II, Main Street, Charlestown, 0802, Nevis (Company No. C 62565).

Contact

Privacy questions: [email protected]