Privacy
Last updated: 8 August 2026
What we collect
- Your email address. Required — it is how you get back into your order and how we tell you about payment problems.
- Order contents and payment facts — what you bought, the amounts, the coin, the payment identifier from our payment processor.
- Whatever you put in a quote request — the item, dates, or details you send us so we can price it. For travel that includes traveller names; we pass them to the airline or hotel because the booking cannot be made without them, and we keep them only as long as the booking record requires.
- The country your request came from, as a fraud signal.
- An access log each time a code is decrypted and sent to you. This exists so a disputed order has an answer.
What we do not collect
- No account, no password — there is nothing to breach.
- No card numbers. We never touch them; payment happens on-chain.
- No name or postal address for digital orders.
- No advertising trackers and no third-party analytics profiling.
Who we share with
Only the processors that make an order work: our payment provider (NOWPayments) receives the order reference and amount; our email provider (Resend) receives your address and the message; our database and hosting providers (Supabase, Vercel) store and serve the data. None of them are permitted to use it for their own purposes.
Codes
Redemption codes are encrypted at rest with AES-256-GCM, so a database breach does not expose them. They are never written to a log or an error message, and every decryption is recorded. A code is decrypted once — to put it in your delivery email — and again only if you ask us to resend it.
How long we keep it
Order records are kept for seven years, because tax and dispute resolution require it. Code access logs are kept for two years. Ask us to delete anything not covered by that and we will.
Your rights
Email support@allwithcrypto.com to get a copy of your data, correct it, or delete it. We answer within thirty days.
Cookies
Your cart is stored in your own browser's local storage, not in a cookie on our server. We set no tracking cookies.
Operated by Djali et fils LLC, a Wyoming limited liability company (filing ID 2026-001899332), 30 N Gould St, Ste N, Sheridan, WY 82801, United States.