Skip to content
Chart & Chill

Privacy policy

Last updated: September 2026

This policy explains what personal data Chart & Chill collects, why, and what you can do about it.

What we collect

  • Account details: name, email address, connected Telegram account or WhatsApp number, preferred language and a hashed password.
  • Identity verification: the document photos and selfie you upload, the document type and the result of our review.
  • Orders and payments: products bought, amounts, payment method, network and transaction IDs. We never see your wallet keys.
  • Support: tickets, live chat messages and conversations with the AI assistant.
  • Telegram: if you connect Telegram, your Telegram chat ID and username.
  • WhatsApp: if you verify with WhatsApp, your mobile number.
  • Technical data: session records (IP address, browser, last activity), security logs and rate-limit counters.

Why we use it

To run your account and deliver what you buy, to verify buyers and prevent fraud, to answer support requests, to send service messages (codes, order updates, license keys, replies) by email, Telegram and WhatsApp, and to keep the site secure. We do not sell your data and do not use it for advertising.

Who processes it

We use trusted providers to run the service: Vercel (hosting), Neon (database), Cloudflare R2 (private file storage, including identity documents), NOWPayments (online crypto payments), MailerSend (email and WhatsApp messages), Telegram (account verification and service messages), and Anthropic through the Vercel AI Gateway (the AI assistant, which receives only the conversation and the account status it needs to answer). They process data only to provide their service to us.

Cookies

We use only necessary cookies: a secure session cookie to keep you signed in and a small marker that tells the site you may be signed in. Your theme and language choices are stored in your browser. We do not use advertising or tracking cookies. For visit statistics we record only daily page-view counts, with no cookies and no stored IP addresses. YouTube and other embedded videos load only when you press play.

How long we keep it

Account and order records are kept while your account is active and afterwards as long as needed for accounting and legal obligations. Identity documents are kept while your account is active and then deleted unless the law requires us to keep them. Sessions expire after 30 days of inactivity.

Your choices

You can view and update your profile and sign out other devices in your dashboard, disconnect Telegram at any time, and ask us to access, correct or delete your data by opening a ticket. Some records (for example completed orders) may need to be kept for legal reasons.

Security

Passwords are hashed, sessions are stored as hashes, identity documents are private and only visible to our reviewers through short-lived links, and all traffic is encrypted.

Changes and contact

We will post updates to this policy here. For privacy questions, open a ticket in your dashboard.