Privacy Policy

Djali et fils LLC operates Loothouse. This policy explains what we collect and what we do with it. We collect as little as the service allows.

What we collect

• Email address — for sign-in and to deliver your code.
• Order history — products, quantities, amounts, and status.
• Payment identifiers — the public blockchain transaction ID you submit, plus the selected asset, network, quoted amount, and receiving address.

What we never see

We never see or store card details, bank details, seed phrases, or wallet private keys. Direct crypto transfers are visible on their public blockchain; we store the transaction ID needed to match and manually verify an order.

Who processes your data

• Supabase — database and authentication.
• Vercel — application hosting.
• Public blockchains and explorers — transaction verification; blockchain records are public and outside our control.
• Resend — transactional email (your code and receipts).

Each processes data only to provide its part of the service. We do not sell your data, and we do not share it for advertising.

Retention

We keep order records for as long as needed for support, accounting, and legal obligations — typically a few years — then delete them. You can request earlier deletion of your account and personal data at any time, subject to records we are legally required to retain.

Requesting deletion

Email support@loothouse.us from your account address to request access to, or deletion of, your data. We respond within 30 days.