OUR CORE PRIVACY PRINCIPLEData used for orders, support and measurement
We apply data minimization to order processing. We do not store social media passwords or 2FA codes. The public target, email, payment and order references, and limited technical records are used for delivery, support, fraud prevention, legal obligations and aggregate analytics.
COLLECTED DATAPublic target, email and order data
We only request your public social media account handle (e.g. @username) or public post URL, plus a required email for the receipt and order updates. We also retain operational order and payment references needed to support and reconcile the purchase.
NO CREDENTIALSZero password storage
We never request, collect, or process your social media password, two-factor authentication (2FA) codes, or private login tokens. Password-free ordering reduces credential exposure, but does not remove platform, delivery or retention risk.
PAYMENT PRIVACYHosted payment and order records
Checkout is available through a hosted payment page. You enter card or wallet credentials there, not in our product form. We retain order and payment references for reconciliation and support. Do not send full card numbers or CVC codes to support.
DATA RETENTIONRetention and data requests
Delivery operational logs are retained only for the duration required to verify fulfillment and satisfy statutory bookkeeping requirements. You may request access, correction or deletion by contacting support@buyfollowers.app.
BROWSER DATABrowser storage and visit measurement
Visiting the site can generate measurement records even if you do not place an order. A randomly generated visitor identifier is saved in a first-party cookie and local storage so visits can be associated with the same browser. It is not your social media login.
- Visitor and session storage
- The visitor cookie is set for 365 days and refreshed when used; the local-storage copy has no application-set expiry. Session storage holds a session identifier and arrival-source information. A new session starts after 30 minutes without recorded activity. Browser settings can restrict or clear these storage mechanisms.
- What visit records contain
- Records can include the page visited, navigation or purchase-step events, referring site and campaign information, browser, device, language, and approximate country or city supplied by the hosting service. Security signals include masked network addresses and hashed identifiers used to distinguish traffic. These records help us understand visitor journeys and distinguish customers, automated traffic and test activity.
- Storage and deletion requests
- Clearing browser storage does not delete records already held by the service. Cookie expiry and session timeout are not server record-deletion deadlines. For access, correction or deletion requests, use the contact details below; payment, dispute or bookkeeping records may need to be retained as described here.
Browser-data explanation updated 4 November 2026.
GDPR Inquiries
Under Chapter III of the General Data Protection Regulation (GDPR), you may have rights to access, rectify or erase personal data held about your orders. We respond under applicable law; records may be retained where payment, fraud-prevention or bookkeeping obligations require it. Contact support@buyfollowers.app.