Privacy policy

Order data: the email address you give, the account you bought, the amount and currency, timestamps and the order status.

Payment data: the public address of the wallet you paid from and the transaction signature. Solana is a public blockchain: transactions are visible to anyone and cannot be erased, by us or anyone else.

Account data, if you create an account: your email address and, if you sign in with Google, your Google account email and basic profile identifier.

Technical data: your IP address (used to prevent abuse of reservations), browser data needed for security checks by Cloudflare Turnstile, and anonymous page view counts per listing.

Restock alerts: the email address you leave on an out-of-stock listing.

We never ask for or store card or bank details, and we never receive your wallet's private key or seed phrase.

To take, deliver and support your order (performance of the contract). To prevent fraud and abuse and keep the service secure (legitimate interest). To keep accounting and tax records (legal obligation). To email you when an item is back in stock, only if you asked for it (consent, which you can withdraw at any time).

We do not sell your data, do not use advertising trackers and do not send marketing emails you did not ask for.

Supabase (database, authentication and file storage), Cloudflare (hosting, network security and bot protection), Resend (sending emails), Helius (reading the Solana blockchain) and, if you use it, Google (sign-in). These providers act on our instructions under data processing terms. Some of them may process data outside your country, including in the United States, under appropriate safeguards such as standard contractual clauses.

Order and payment records are kept for as long as required by accounting and tax law (typically up to 10 years). Restock alert emails are kept until the alert is sent or you ask us to delete them. Account data is kept until you ask us to delete your account. Security logs are kept for a short period, usually less than 90 days. On-chain transactions are permanent and outside our control.

We only use strictly necessary cookies and browser storage: to keep you signed in, to secure the admin area, to remember the orders you placed from this browser and to protect checkout from bots. No analytics or advertising cookies are used, so no consent banner is needed.

Depending on where you live, you can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent. Email support@polar-store.com; we answer within one month. Some data must be kept for legal reasons and data on the blockchain cannot be deleted.

If you are in the EU or UK, you can also complain to your data protection authority.

Account logins are encrypted before they are stored, access to the admin area requires a password and a one-time email code, and all traffic is encrypted in transit.

Polar Store is not intended for anyone under 18 and we do not knowingly collect their data.