Privacy Policy
Last updated: 11 June 2026
Syxlor Store (“we”, “us”, “our”) operates the digital marketplace at shop.syxlor.xyz. This policy explains what information we collect, why we collect it, and the choices you have. By using the store you agree to the practices described here.
1. Information we collect
- Account data: name, email address, and a hashed password (we never store your password in plain text).
- Order data: the products you buy, amounts, currency, and the delivery details you provide (e.g. Free Fire UID, Discord username, Minecraft username, server invite).
- Payment data: processed by our payment provider (PipraPay). We store a payment reference and status, not your card or mobile-wallet credentials.
- Technical data: IP address, browser/user-agent, and security signals used to prevent fraud and abuse.
- Support data: messages you send through live chat, contact forms, or support tickets.
2. How we use your information
- To create your account, process orders, and deliver digital goods and services.
- To send transactional messages — order confirmations, payment receipts, invoices, and delivery notices — by email and (optionally) Discord.
- To provide customer support and respond to your enquiries.
- To protect the store: rate limiting, captcha verification, fraud and abuse detection.
- To meet legal, accounting, and tax obligations.
3. Payment processing
Payments are handled by PipraPay (supporting bKash, Nagad, cards, and other methods). Your payment credentials are entered on the provider’s secure checkout and are never seen or stored by Syxlor Store. We only receive a payment status and reference to fulfil your order.
4. Sharing your information
We do not sell your personal data. We share data only with:
- Our payment provider, to take payment.
- Our email provider, to send transactional email.
- Service partners where a product requires it (for example, the platform a top-up or subscription is delivered to).
- Authorities, where required by law.
5. Data retention
We keep account and order records for as long as your account is active and as required for tax, accounting, and dispute-resolution purposes. You may request deletion of your account (see §7).
6. Security
We use bcrypt password hashing, optional two-factor authentication, captcha, rate limiting, CSRF protection, and encrypted transport (HTTPS). No method is 100% secure, but we work to protect your data.
7. Your rights
You can access and update your profile from your dashboard, enable two-factor authentication, and request a copy or deletion of your data by contacting support. We will respond within a reasonable time.
8. Cookies
We use essential cookies for login sessions and a chat-continuity cookie so your live-chat history follows you between visits. We do not use third-party advertising cookies.
9. Children
The store is not directed at children under 13, and we do not knowingly collect their data.
10. Contact
Questions about this policy? Reach us through live chat on the site or via the support channels listed in the footer.