Written from the code, not from a template

Most privacy policies are a template that describes a shop nobody ever built. This one lists the actual cookies, the actual tables and the actual retention periods — you can check every line of it against how the site behaves.

3cookies, all first-party
0analytics or ad trackers
0e-mails ever sent
Hashedis how we keep your IP

Controller within the meaning of the GDPR: Kernhardt Systems GmbH, Röntgenstraße 14, 22335 Hamburg, Germany, represented by Jonas Reineke. There is no e-mail address on this site by design; written enquiries reach us at the postal address above.

1The short version

You can browse and buy without creating an account.
We keep what a parcel needs: a delivery address, and what you ordered.
Your IP address is never stored in readable form — only a keyed hash, and only to stop password guessing.
No analytics, no advertising pixels, no social buttons, no fingerprinting.
We send no e-mail at all, so there is no mailing list to be on.
We have never sold, rented or shared customer data, and there is no line item in this business that would make it profitable.

2What we store, and why

Data	Why	Legal basis	Kept for
Delivery addressname, street, city, postcode, country, optional phone	A courier cannot deliver to a wallet.	Art. 6 (1) (b) — performance of the contract	Ten years, as German commercial and tax law requires of order records
Order contents and totals	To pack it, to honour the warranty, and to keep books.	Art. 6 (1) (b) and (c)	Ten years
E-mail addressoptional, and never written to	So support can find your order if you ever write in.	Art. 6 (1) (b)	With the order
Passwordonly if you open an account	To let you back in.	Art. 6 (1) (b)	Until you delete the account. Stored as an Argon2id hash — we cannot read it
Hashed IP addressHMAC-SHA-256, truncated; the address itself is never written down	Counting failed sign-ins, so nobody can guess passwords all night.	Art. 6 (1) (f) — securing the service	Two days, then deleted automatically
Session recorda random token, a coarse device label such as “Firefox on Windows”, last-seen time	To keep you signed in and to let you revoke a device.	Art. 6 (1) (b)	Up to 30 days, or until you sign out
Paymentcoin, network, deposit address, amount, transaction status	To recognise your payment and to refund it if we must.	Art. 6 (1) (b)	Ten years

What is not on this list is not collected. No date of birth, no bank detail, no browsing profile, no device fingerprint — see how checkout works.

3What stays in your browser

Your basket, your chosen coin and your display currency are kept in your own browser's local storage under ch.cart, ch.coin and ch.fiat. They are never sent to us as a profile; the basket is only transmitted at the moment you price it or place the order. Clearing your browser data removes them, and nothing of yours is left on our side.

The three cookies we set are listed on the cookies page. All three are strictly necessary, first-party, and none of them tracks you between sites.

4Who else sees anything

Four, and no more. None of them receives data for their own purposes.

The carrier (DHL, UPS or DPD, depending on where you are) gets your name, address and the parcel — that is the delivery. Outside the EU customs union it also gets a customs declaration; see discreet packaging.
Cloudflare serves this site and shields it. It sees the connection itself, and it tells us only the two-letter country your connection comes from, which we use to pre-fill the country field. Its anti-bot check runs on account registration only — never on sign-in, and never on checkout.
Our payment processor receives the order reference, the amount and the coin, in order to produce a deposit address and tell us when it is paid. It does not receive your address.
Our hosting provider, on servers in the EU.

There is no analytics provider, no advertising network, no CRM, no e-mail sender, no chat widget and no A/B testing service, because none of them exists in this codebase.

5Your rights

Under the GDPR you may ask us for access to your data (Art. 15), correction (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and you may object to processing based on our legitimate interests (Art. 21). Write to the postal address above, quoting your order reference.

An honest limit: if you ordered as a guest with no e-mail, the order link is the only thing tying you to that order, so we can only act on a request from someone holding it. Keep it safe — it is both your receipt and your proof.

Order records subject to the ten-year statutory retention cannot be erased before it expires; they are restricted from all other use instead. You may also complain to a supervisory authority — for us, the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

6Transfers outside the EU

Our servers and our database are in the EU. Cloudflare operates a global network and may route a connection through equipment outside the EU; that is covered by the European Commission's standard contractual clauses. A parcel sent to a destination outside the EU necessarily takes your address with it, because that is what an address is for.

7Changes

If this policy changes, the change is made here and this page is what applies. We cannot notify you of it, because we have no way to write to you — which is itself the largest privacy decision this shop has made.