Privacy Policy
Last updated: July 4, 2026
1. Who we are
YSTOER is operated by Youssef Abulhassan Mohamed Mubarak, trading as YSTOER (the "Seller", "we"). For personal data you provide to us in connection with the YSTOER service, the Seller acts as the data controller.
2. Data we collect
- Account data: email address, display name, authentication identifiers.
- Order data: in-game Player ID, order history, product selected.
- Support data: messages you send us through chat or Telegram.
- Technical data: IP address, device/browser information, log data, cookies necessary for the service.
- Payment metadata: transaction identifiers and status returned by our payment processor. Full payment details are handled by PayPal and are never stored on our systems.
3. How and why we use your data
- Creating and maintaining your account.
- Processing and delivering your orders and providing support.
- Preventing fraud, abuse, and chargebacks.
- Complying with legal, tax, and accounting obligations.
- Improving the service and diagnosing technical issues.
4. Legal basis
Where applicable law requires a legal basis, we rely on contract performance, legitimate interests, legal obligations, and consent where specifically required.
5. Who we share data with
- PayPal — our payment processor. See PayPal's Privacy Statement.
- Cloud and hosting providers that store data and serve the site.
- Communication tools such as Telegram when you contact us there.
- Professional advisers and authorities where required by law.
6. Retention
We keep account and order records while your account is active and for a reasonable period afterward to meet tax, accounting, fraud-prevention, and dispute obligations. When data is no longer needed, we delete or anonymise it.
7. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability, withdrawal of consent, or lodge a complaint with your local authority.
To exercise these rights, contact us on Telegram @UP_YStore.
8. Security
We apply technical and organisational measures including HTTPS encryption, access controls, and database security. Payment data is handled by PayPal in a PCI-compliant environment; we never see or store it.
9. International transfers
Our service providers may process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
10. Cookies
We use cookies and similar technologies that are strictly necessary for session, authentication, and security. If analytics or marketing cookies are introduced, we will request consent first.
11. Changes
We may update this notice from time to time. The date above reflects the most recent change.
12. Contact
Data-protection questions? Reach us on Telegram @UP_YStore.