Privacy Policy

1. Who we are

YSTORE is operated by Youssef Abulhassan Mohamed Mubarak, trading as YSTORE (the "Seller", "we"). For personal data you provide to us in connection with the YSTORE service, the Seller acts as the data controller.

2. Data we collect

Account data: email address, display name, authentication identifiers.
Order data: in-game Player ID, order history, product selected.
Support data: messages you send us through chat or Telegram.
Technical data: IP address, device/browser information, log data, cookies necessary for the service.
Payment metadata: transaction identifiers and status returned to us by our payment processor. Full card details are handled by Paddle and are never stored on our systems.

3. How and why we use your data

Creating and maintaining your account (contract performance).
Processing and delivering your orders and providing customer support (contract performance).
Preventing fraud, abuse, and chargebacks, and keeping the service secure (legitimate interests).
Complying with legal, tax, and accounting obligations (legal obligation).
Improving the service and diagnosing technical issues (legitimate interests).

4. Legal basis

Where applicable law requires a legal basis for processing, we rely on: performance of a contract with you, our legitimate interests (fraud prevention, service security, product improvement), compliance with a legal obligation, and your consent where specifically required (e.g. non-essential cookies).

5. Who we share data with

Paddle — our Merchant of Record for all payments. Paddle processes checkout, billing, tax, invoicing, subscription management, refunds, and related fraud checks. See Paddle's Privacy Notice.
Cloud and hosting providers that store data and serve the site on our behalf.
Communication tools (e.g. Telegram) if you contact us there.
Professional advisers (legal, accounting) where necessary.
Authorities when required by law, court order, or to protect our rights.

6. Retention

We keep account and order records for as long as your account is active and for a reasonable period afterward to comply with tax, accounting, fraud-prevention, and dispute-resolution obligations (typically up to 7 years for financial records). Support messages are kept for up to 24 months. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request erasure of your data ("right to be forgotten");
request restriction of, or object to, certain processing;
request portability of the data you provided to us;
withdraw consent where processing is based on consent; and
lodge a complaint with your local data-protection authority.

To exercise these rights, contact us on Telegram @ystore. We will respond within one month.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, and row-level security on our database. Payment card data is handled exclusively by Paddle in a PCI-compliant environment; we never see or store it.

9. International transfers

Our service providers may process data outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Cookies

We use cookies and similar technologies that are strictly necessary to operate the site (session, authentication, security). If we introduce analytics or marketing cookies, we will request your consent first.

11. Changes

We may update this notice from time to time. The "Last updated" date above reflects the most recent change.

12. Contact

Data-protection questions? Reach us on Telegram @ystore.