This policy explains what SerpYard ("we") collects when you use serpyard.com or buy from us, and what we do with it.
1. What we collect
When you visit the site:
- Your IP address, browser type and the pages you request, in our server logs.
- Short-lived records of requests per IP address, to stop login abuse.
- If you email [email protected]: your email address and message.
When you order through Telegram:
- Your Telegram username and our chat history. Telegram's own privacy policy also applies to that chat.
- Your order: the item, price, payment method and payment reference (a transaction hash or Wise reference).
- What the payment itself shows us: your wallet address for USDT, or the sender name on a Wise transfer.
- For domains, your account username at the registrar we push the domain to.
When you create an account (once accounts open):
- Your email address and a hashed password. We never see or store your password itself.
- Your Telegram username, if you give it.
- Two-factor authentication data, if you turn it on.
- For each login session: your IP address and browser details, to keep the session secure.
- Your deposits, balance history and orders.
- Which backlink sites you revealed and on which day. We use this to apply the daily limit and to detect copying of our lists.
- When you accepted our Terms, and which version.
2. Why we use it
- To deliver what you bought and to support you afterwards.
- To run your account, balance and order history.
- To protect the site and our listings from abuse and scraping.
- To keep records for disputes and for our own accounting.
The legal basis: delivering what you bought is needed for our contract with you. Protecting the site and our listings, and keeping dispute records, are our legitimate interests. Accounting records are kept because the law requires them.
We don't sell your data and we don't use it for advertising.
3. Who else handles it
| Service | What it does | What it sees |
|---|---|---|
| Cloudflare | Delivers the site and blocks attacks | Your IP address and requests |
| Telegram | Chat for orders and support | Our conversation |
| Our email provider | Sends account emails, such as password resets (once accounts open), and delivers mail sent to [email protected] | Your email address and message |
| Our server and backup storage | Hosts the site and its encrypted backups | Everything in this policy |
Payments go directly between you and the blockchain (USDT) or Wise. We see only the payment details needed to match your payment.
4. How long we keep it
- Server logs: 7 days, then they are deleted.
- Account data: while your account is open. If you ask us to delete your account, we anonymize it: your email, name and Telegram username are removed, and your sessions are deleted.
- Orders, payments and balance history: kept as business records for up to 5 years, even after an account is deleted, so we can handle disputes and keep accounts.
- Backups: 7 days on our server, 30 days for the encrypted copies offsite. Data you asked us to delete disappears from backups within 30 days.
5. Cookies
- A login cookie keeps you signed in. Without it, accounts can't work.
- Cloudflare may set a security cookie to tell people from bots.
- Your theme choice and table settings stay in your browser and are not sent to us.
We don't use analytics or advertising cookies.
6. Your choices
- Ask for a copy of the data we hold about you.
- Ask us to correct it.
- Ask us to delete your account. Order and payment records stay, as section 4 explains.
- Object to how we use your data.
- If you are in the EU or UK, complain to your local data protection authority.
Send requests from the email on your account, or on Telegram, to [email protected] or @serpyard. We reply within 30 days.
7. Security
- Passwords are stored as hashes. Admin accounts need two-factor authentication.
- The database is not reachable from the internet, and backups are encrypted.
- No system is perfectly secure. If a breach affects your data, we tell you by email or Telegram.
8. Children
SerpYard is for adults buying for business. We don't knowingly collect data from anyone under 18.
9. Changes
We may update this policy. The effective date at the top changes, and the new version goes on this page.
10. Contact
- Email: [email protected]
- Telegram: @serpyard