Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains how ISRIB.shop (“we”, “us”, “our”) collects, uses, and protects personal data when you visit our website or contact us.

1) Data We Collect

• Contact data: name, email, messenger handle (e.g., Telegram), and messages you submit via forms or chat.
• Order‑related data: product interest and pack/price selections you submit to request a manual order.
• Technical data: IP address, browser type, device info, pages visited (via standard server logs and analytics).
• Account data: if you create an account: your name, email, a hashed password (we never store it in plaintext), email‑verification status, a personal referral code, and your account id and creation date.
• Order history: orders placed under your account, including earlier orders you placed before accounts existed, so you can view them when signed in.

2) Cart & Local Storage

To provide a smooth browsing experience, the site uses the browser’s localStorage to keep your cart items and preferences on your device. This data is not transmitted to us unless you submit a form (e.g., checkout request) — only then the cart contents are included in the request payload. You can clear this data any time by emptying the cart or clearing your browser storage.

Accounts & Sessions

Accounts are optional. When you register, your password is hashed and salted before storage — we never store or see your plaintext password. Signing in sets a secure, http‑only session cookie (isrib_customer_session) that keeps you logged in for about 30 days. Email‑verification and password‑reset links are single‑use and time‑limited.

3) How We Use Your Data

• To respond to inquiries and process manual orders.
• To communicate about availability, payment, and shipping.
• To maintain security, prevent abuse, and improve site performance.
• To comply with legal obligations (e.g., basic record keeping).

4) Legal Bases (GDPR‑style)

• Contract/steps prior to contract: handling your request and order details.
• Legitimate interests: operating, improving, and securing our website/services.
• Consent: where required (e.g., certain cookies and analytics/marketing).
• Legal obligation: where retention is required by law.

5) Data Retention

We keep personal data only as long as necessary for the purposes described above, then delete or anonymize it, unless a longer retention is required by law or to establish, exercise, or defend legal claims.

6) Sharing of Data

We do not sell personal data. We may share limited data with:

• Service providers (e.g., hosting, serverless form handlers, live chat) strictly to operate the site and answer your requests.
• Authorities when required by law or to protect our rights and safety.
• Sub‑processors listed below in “Third‑Party Services”, each strictly to operate the store, take payment, send email, and measure performance.

Email Communications

We may send you transactional emails related to your orders and cart recovery reminders. You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any email or visiting our unsubscribe page.

7) International Transfers

Some providers may process data in other countries. Where applicable, we rely on appropriate safeguards (e.g., standard contractual clauses).

8) Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, port your data, or withdraw consent. To exercise these rights, contact us via the details below.

Referral Program Data

If you take part in the referral program, we store your referral code, a record of which orders were referred, and any discount credits you earn, so we can run the program and apply your rewards.

9) Cookies & Analytics

We use cookies that are essential to operate the site — including your sign‑in session (isrib_customer_session) and, where relevant, referral and promo cookies (isrib_ref, isrib_promo) that remember a code you arrived with.

We also use analytics and advertising measurement: Meta Pixel and Conversions API (which may set _fbp/_fbc cookies), Google Analytics 4, and Microsoft Clarity. These help us understand traffic and improve the site. You can limit cookies via your browser settings.

10) Security

We implement reasonable technical and organizational measures to protect personal data: passwords are hashed and salted, data is encrypted in transit (HTTPS), and access is limited to what is needed to operate the store. However, no online transmission or storage system is 100% secure.

11) Third‑Party Services

• Hosting: Vercel — serves the website and runs our server functions.
• Database: Neon (PostgreSQL) — stores orders, account, and referral data.
• Email: Resend — sends order, verification, and account emails; Upstash schedules order‑reminder emails.
• Payments: NowPayments — processes cryptocurrency payments; we receive confirmation of payment status.
• Analytics/Advertising: Meta, Google Analytics, and Microsoft Clarity — measure site usage and marketing performance.

12) Contact

For privacy requests or questions, contact us via the contact page or Telegram. We reply as soon as possible.

13) Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest version. Continued use of the site after changes means you accept the updated Policy.