Privacy
Last updated: 8 August 2026
What we collect
- Your email address. Required — it is how you get back into your order and how we tell you about payment problems.
- Order contents and payment facts — what you bought, the amounts, the coin, the payment identifier from our payment processor.
- Whatever you put in a quote request — the item, dates, or details you send us so we can price it. For travel that includes traveller names; we pass them to the airline or hotel because the booking cannot be made without them, and we keep them only as long as the booking record requires.
- The country your request came from, as a fraud signal.
- An access log each time a code is decrypted and sent to you. This exists so a disputed order has an answer.
What we do not collect
- No account, no password — there is nothing to breach.
- No card numbers. We never touch them; payment happens on-chain.
- No name or postal address for digital orders.
- No analytics profiling of you as a person. We do run Google's advertising tag — see Cookies below for exactly what that means and where it is switched off.
Marketplace orders
Some items on this site are sold by independent sellers rather than by us. If you buy one, we pass your delivery address, name and phone number to that seller, because they are the person posting the parcel and it cannot reach you otherwise. We do not give them your email address, and they see nothing about your other orders.
Sellers are contractually limited to using those details to fulfil your order. The address stops being visible to them once they have entered a tracking number. Every product page states who the seller is before you buy, so you always know whose hands it is going through.
Who we share with
Only the processors that make an order work: our email provider (Resend) receives your address and the message; our database and hosting providers (Supabase, Vercel) store and serve the data. None of them are permitted to use it for their own purposes. There is no payment processor — crypto is paid directly to wallets we control, so no third party receives your payment details. We request an exchange rate from CoinGecko to quote your amount; that request carries no information about you or your order.
Codes
Redemption codes are encrypted at rest with AES-256-GCM, so a database breach does not expose them. They are never written to a log or an error message, and every decryption is recorded. A code is decrypted once — to put it in your delivery email — and again only if you ask us to resend it.
How long we keep it
Order records are kept for seven years, because tax and dispute resolution require it. Code access logs are kept for two years. Ask us to delete anything not covered by that and we will.
Your rights
Email support@allwithcrypto.com to get a copy of your data, correct it, or delete it. We answer within thirty days.
Cookies and the Google tag
Your cart is stored in your own browser's local storage, not in a cookie on our server. We set no cookies of our own for tracking.
We do load Google's advertising tag (gtag.js) so we can tell which adverts bring people here. It sets cookies belonging to Google and tells them which pages you viewed on this site. That is a real third party receiving data about your visit, and saying otherwise would be dishonest.
Two places it is deliberately switched off. It never loads on your order page, because the address of that page contains the token that opens your order and we are not sending that to anyone. And it never loads on the admin area.
If you would rather not be measured at all, any content blocker stops it, and nothing on this site breaks when it is blocked — checkout, delivery and support all work exactly the same.
Operated by Djali et fils LLC, a Wyoming limited liability company (filing ID 2026-001899332), 30 N Gould St, Ste N, Sheridan, WY 82801, United States.