Username, password hash, wallet ledger, orders, payments, support tickets and security events. We do not collect email addresses or use them for identity.
Connecting Telegram is optional. It is used only to send notifications you enable; it never authenticates you.
Financial records are retained for the legally required period. Support content is retained according to our support retention policy.
Crypto payments are processed by a third party on its hosted page. We store only the identifiers and statuses needed for reconciliation.