Privacy Policy

1.Who is responsible for your data

PlugFame is the data controller for the personal data described in this policy. You can reach us at [email protected] for any privacy question or request.

2.What we collect

• Order details — the public profile or post link you provide, plus the service, quality tier and quantity you choose. Note that a public profile link is still personal data.
• Contact details — the email address you enter, used for your receipt and order updates.
• Payment data — your payment is made in cryptocurrency and handled directly by our payment processor, Cryptomus. No card or bank details are involved; we receive only a payment reference, the amount, and the on-chain confirmation status.
• Technical data — IP address, device and browser type, and pages visited, used to keep the site working, rate-limit abuse and prevent fraud.

3.Why we use it, and our lawful basis

• To deliver your order (link, service, quantity) — performance of a contract. Without this data we cannot fulfil the order.
• To send your receipt and order updates (email) — performance of a contract.
• To take payment — performance of a contract, and legal obligation for our payment processor's anti-money-laundering and record-keeping duties.
• To prevent fraud and abuse (IP, technical data) — legitimate interests: protecting the service and our customers from fraudulent orders and automated abuse.
• To keep the site working and improve it — legitimate interests.
• Marketing email — only with your consent, which you can withdraw at any time. We do not add you to any list by default.

We do not sell your personal information.

4.Who we share it with

• Cryptomus — our cryptocurrency payment processor. Cryptomus processes your crypto payment on our instruction and applies its own screening, fraud prevention and regulatory-compliance checks as an independent controller for those purposes. It may collect data directly from you on its hosted checkout page. See Cryptomus's Privacy Policy.
• Our fulfilment partner — the delivery network that fulfils your order. We pass them only the public link and the quantity needed to deliver. We do not pass them your email or payment data.
• Hosting and infrastructure providers — who store the site and order records on our behalf under contract.
• Authorities — where we are legally required to disclose.

5.International transfers

Some of these providers are located outside your country, including in the United States. Where personal data is transferred out of the UK or EEA, it is protected by an adequacy decision or by appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguards that apply.

6.Automated decision-making

Our payment processor (Cryptomus) applies automated screening to crypto payments, which can flag or decline a transaction. This is necessary to enter into the contract and to prevent fraud. If a payment is declined and you believe that was wrong, contact us and a person will review it.

7.How long we keep it

We keep order records (link, email, service, amount, status) for as long as needed to deliver the order, honour any applicable refill cover, handle refunds or disputes, and meet tax and accounting obligations — typically six years for financial records, as required by law. Technical logs used for security and rate-limiting are kept for a short period and then deleted. When data is no longer needed for any of these purposes we delete or anonymise it.

8.Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you, and get a copy.
• Rectify data that is inaccurate or incomplete.
• Erase your data ('right to be forgotten'), subject to records we must legally retain.
• Restrict or object to processing, including processing based on legitimate interests.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time where we rely on consent.
• Complain to a supervisory authority — in the UK the Information Commissioner's Office (ico.org.uk), or your local EU data protection authority. We would appreciate the chance to resolve it first.

To exercise any right, email [email protected]. We respond within one month.

9.California residents (CCPA/CPRA)

In the past 12 months we collect these categories of personal information: identifiers (email, IP address, order link), commercial information (orders placed, amounts paid), and internet activity (pages visited, device/browser). We collect them for the purposes described above.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

You have the right to know, delete, and correct your personal information, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights. Submit a request by emailing [email protected]; we will verify it against your order details before acting.

10.Cookies

We use essential cookies to make checkout and the site work — these cannot be switched off without breaking the service. Our payment processor (Cryptomus) hosts its own checkout page and may set cookies there for security and fraud prevention. We use only light, aggregate analytics to understand site usage. You can control cookies in your browser, but disabling essential cookies will prevent checkout from working.

11.Changes & contact

We may update this policy; the "Last updated" date at the top reflects the current version, and we will flag material changes on the site. Questions or requests: [email protected] or our contact page.