PRIVACY POLICY
Effective Date: August 22, 2026
Website: https://epicstash.eu
At EpicStash ("Provider", "we", "us"), we prioritize the privacy and security of our customers ("User", "you"). This Privacy Policy explains how we collect, use, and protect your data when using https://epicstash.eu, in strict compliance with the EU General Data Protection Regulation (GDPR - EU 2016/679).
1. DATA CONTROLLER
• Platform: EpicStash (https://epicstash.eu)
• Official Data Protection & Support Contact: support@epicstash.eu
• Community & Fast Support: Official Discord Server & Telegram Channel
2. INFORMATION WE COLLECT & PURPOSE
• Account & Login Data: Email address, Discord ID, authentication tokens.
Purpose: Account creation, order access.
Legal Basis: Contract performance (Art. 6(1)(b)).
• Orders & Delivery Data: Order history, assigned digital assets, fulfillment logs.
Purpose: Automated instant delivery, warranty & replacements.
Legal Basis: Contract performance (Art. 6(1)(b)).
• Payment Records: Transaction IDs, crypto hashes/addresses, gateway status.
Purpose: Payment verification, fraud detection, statutory billing records.
Legal Basis: Legal compliance (Art. 6(1)(c)).
• Technical & Security Data: IP address, browser fingerprint, operating system, session cookies.
Purpose: Anti-DDoS mitigation, abuse prevention, system optimization.
Legal Basis: Legitimate interest (Art. 6(1)(f)).
• Support & Customer Reviews: Ticket transcripts, Discord messages, verified customer feedback.
Purpose: Dispute resolution, customer support, verified feedback display.
Legal Basis: Consent / Legitimate interest.
3. DATA RETENTION
• Account & Order Records: Retained while your account remains active or until a deletion request is completed to validate active warranty periods and replacement claims.
• Transaction & Accounting Logs: Retained for up to five (5) years in compliance with statutory financial and anti-fraud regulations.
• Server & Security Logs: Automatically purged or anonymized on a 90-day rolling cycle.
4. THIRD-PARTY SHARING & SUB-PROCESSORS
EpicStash does not sell, trade, or monetize personal user data. Data is exclusively transferred to trusted third-party service providers strictly required to maintain operations:
• Payment Processors & Gateway Integrations: Card processors (Stripe, Apple Pay, Google Pay) and cryptocurrency checkout networks. Payment card credentials are processed directly by certified gateways and never stored on our servers.
• E-Commerce & Delivery Automation: Fulfillment platforms (SellAuth, Whop) and automated webhook dispatchers.
• Infrastructure & Security: Cloud CDN networks and anti-DDoS mitigation providers.
• Anti-Fraud Networks: Shared risk and fraud-prevention databases in cases of chargeback abuse or intentional exploit attempts.
5. COOKIES & LOCAL STORAGE
We strictly deploy essential session tokens and cookies required to maintain login sessions, shopping cart configurations, and security protections. We do not use third-party advertising or invasive marketing tracking scripts.
6. YOUR RIGHTS UNDER GDPR
As an EU/EEA resident, you possess full statutory rights regarding your personal data:
• Right of Access: Request copies of your processed personal data.
• Right to Rectification: Request corrections to inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of data, subject to statutory financial retention requirements.
• Right to Data Portability: Obtain your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to data processing conducted under legitimate interests.
7. CONTACT & EXERCISING YOUR RIGHTS
To submit a formal data request, exercise your GDPR rights, or inquire about our privacy practices, please contact us directly via email at support@epicstash.eu or submit a ticket through our official Discord Server.