Privacy Policy
We collect what an order needs and nothing beyond it. We do not sell your data, and we run no advertising or profiling trackers.
What we collect
Your email address, so we can deliver an order and reach you about it, and a password stored only as a one-way hash we cannot reverse (none at all if you sign in with Google). Your orders, balance and payments — for a payment only the invoice and the transaction that settled it; we never see a card, a wallet key or a seed phrase. What an order itself needs: the social media link for a growth service, or the account ID or email you enter for a top-up. If you use our Telegram bot or connect Telegram, your Telegram ID, name and username. If you use our API, the time, model and token count of each request — never what you send or receive. Like every website, our server records the IP address, page and browser of each visit.
Why we hold it
To deliver what you bought, to let you re-download it later, to confirm payments, to answer support, to bill API use, and to protect the site and its customers from fraud and attacks. That is the whole list.
Cookies
Two, and both are needed for the site to work, so there is no consent banner: a signed session cookie that keeps you signed in and holds your cart (1 year from your last visit), and a language cookie that remembers the language you chose (1 year). There are no advertising, analytics or cross-site tracking cookies.
Who else sees it
Only those who need part of it to do their job: our hosting provider (Hetzner, Germany); the payment processor that issues your invoice (PayID19), or Binance when you pay with Binance Pay; Google, which sends our emails and, if you choose it, signs you in; Telegram, for the bot and its messages; the supplier that fulfils your order, which gets only what the order needs (such as a profile link or a player ID) and never your email address; and, for API requests, the AI model provider that answers them. The API setup guides also load their fonts from Google. We do not sell, rent or share your data for marketing.
Transfers abroad
Some of these services are outside Turkey: our server is in Germany, and Google, Telegram, the payment processors and the AI model provider work internationally. Your data goes to them only for the purposes above.
How long we keep it
Your account, orders and payments: while your account is open, so you can re-download past purchases and we can settle disputes. Closing your account removes your profile and email; only the anonymised record of completed sales stays. Server logs with IP addresses: 14 days. API usage records: while your account is open. Encrypted backups: at most 60 days. Password-reset and email-confirmation links expire after 1 hour and 48 hours.
Your rights
You can ask for a copy of the data we hold on you, have it corrected or deleted, or object to a use of it — under Turkey's data protection law (KVKK, article 11) and, if you are in the EU, the GDPR. Write to us from your account's email address and we will answer within 30 days. Telegram notifications and store updates can be switched off at any time without affecting your orders.
Security
The site is served over TLS only. Passwords are hashed, sessions are signed, and delivery links are tied to a random token rather than a guessable number. No system is perfect — use a password you use nowhere else.
Contact
Privacy requests go to support@ntmediastore.com, or to @unique_ptr_0. Email is the surer route for a request you want on record.