سياسة الخصوصية · Privacy Policy

This policy explains how the Media Sell website and app (media-sell.shop) collect, use and protect your data.

Data we collect

• Account data: full name, username, e-mail, phone number and password (stored hashed; it cannot be read).
• Sign in with Google or Apple: the provider's account identifier, e-mail, name and profile picture URL if available. We never receive your Google or Apple password.
• Orders and balance: the services you buy, the links/usernames and notes you enter so we can fulfil an order, delivered codes, and your balance, payment and top-up history.
• Automatic top-ups: when you transfer credit to our number, the payment provider's SMS (amount and sender number) is matched to the phone number saved in your account.
• App device data: push notification token (FCM), operating system, app language and version.
• Security data: IP address and logs of sign-in attempts and important actions, to protect accounts and prevent fraud.
• Telegram (optional): your chat ID if you link your account to the Media Sell bot.

How we use data

• To create your account, sign you in, fulfil orders and manage your balance.
• To send verification codes, order/balance notifications and offers (you can turn notifications off in your phone settings).
• To protect accounts (rate limiting, fraud detection) and to provide support.

Sharing

We do not sell your data. We share only what is necessary with: Google Firebase (sign-in and push notifications), Apple (Sign in with Apple), Telegram (if you link it), our hosting and e-mail provider (Hostinger), service fulfilment partners when needed (for example the public link you submit with an order), or authorities when required by law.

Retention and deletion

We keep your account data while your account is active. You can delete your account at any time in the app (Account → Delete account), on the website (My Account → Delete account) or by contacting us. Deletion removes your personal data and disables the account; order and payment records are kept in anonymised form for accounting. See the account deletion page.

Security

Connections are encrypted (HTTPS), passwords and sign-in tokens are stored hashed, and access to data is restricted.

Children

Our services are not directed to children under 13 and we do not knowingly collect their data.

Your rights and contact

You can view and edit your data in My Account, or request a copy or deletion at info@media-sell.shop. We may update this policy and will publish changes on this page.