Privacy Policy

Account: your name, email address and password (your password is held by our authentication provider, not by us in readable form). Optionally a profile picture.

Orders: your email, name, WhatsApp number if you provide one, any notes you add, and the items, prices and currency of your order.

Manual payments: the payment-proof image you upload. These images usually contain personal details from your bank or wallet — please only upload what is needed to show the payment.

Service products: for some services you provide details of your own third-party gaming account, which can include a username, password and backup code. See section 4.

Support: the messages you send to our chat or support address, and our replies.

Reviews: your rating and review text, and a display name. If you have not set a full name, the part of your email address before the "@" is used as that display name — set a name in your account if you would rather it were not.

Technical: when you take certain actions we record the IP address and browser identifier alongside that action, for security and fraud handling. We also read a country signal from your connection to select currency.

To take and deliver your order, to provide support, to handle refunds and disputes, to keep transaction and accounting records, to detect and prevent fraud and abuse, and to operate and secure the site.

We rely on the information above because it is necessary to provide what you asked for, to meet our record-keeping needs, and to protect the store and its customers.

We use service providers to run the store. They receive only what they need:

Supabase — our database, sign-in and file storage, which holds your account, orders, uploads and support history. Stripe and PayPal — payment processing, where enabled; they receive the transaction details needed to take a payment. Resend — sending our emails to you. Sentry — error reporting; it receives an internal account identifier, never your email or the contents of your requests. Vercel — hosting, and optional site analytics. Google Analytics, Microsoft Clarity and PostHog — optional analytics, only if you accept analytics; Microsoft Clarity records how pages are used, including interactions on the page. Upstash — rate-limiting, which briefly uses your IP address as a key.

AI support assistant: if you use the chat, your messages and that conversation's history are sent to our AI provider (Google Gemini or Anthropic) to generate a reply. Product and order-status context may be included so the answer is useful. Your email address, account identifier and payment details are never sent.

We do not sell your personal information.

Some of these providers operate outside Egypt, including in the United States, so your information may be processed there.

Some service products require the login details of your own gaming account so our team can perform the purchase or task you ordered.

These are collected only after checkout, never during payment. They are encrypted before being stored, are visible only to the operator working your order, and are permanently deleted once that order is completed, cancelled or closed. If we cannot encrypt them, we refuse to store them rather than keep them unprotected.

We keep a record that details were provided and when they were deleted — not the details themselves.

Some storage is essential and is always used: keeping you signed in, remembering your language and country, keeping your cart and comparison list, and remembering your cookie choice. These are not optional, because the site cannot work without them.

Analytics is optional and off until you accept it. If you accept, we use Google Analytics, Microsoft Clarity, PostHog and Vercel analytics to understand how the store is used. If you decline, none of them run, and no analytics event is sent from our servers either.

Your choice is stored in a cookie on this site for up to a year. You can change it at any time using the "Cookie settings" link in the footer.

We keep information for as long as it is reasonably needed: to deliver and support your order, to keep transaction and accounting records, to handle fraud, security, disputes and refunds, and to meet obligations that apply to us. We do not keep it longer than those purposes require.

Two exceptions you should know about. Payment proofs and the record of payment approvals and refunds are deliberately preserved and cannot be deleted, because they are the evidence that a payment was made and how it was handled. Gaming account details are the opposite — they are deleted as soon as the order is finished (section 4).

You can update your name and profile picture, and change your notification preferences, in your account. Marketing emails have an unsubscribe link in every message.

There is currently no self-service button to delete your account or download your data. To request access to your information, a correction, deletion, or closure of your account, email us and we will handle it — see section 9. Some records, such as payment proofs and payment history, cannot be deleted for the reasons in section 6.

We use encryption in transit, access controls, encrypted storage for gaming account details, and rate limiting. No online service can promise perfect security, and we do not claim to. If something goes wrong that affects you, we will tell you.

For any privacy question or request, email support@ryvostore.com. Please use the email address on your account so we can identify you.

We update this policy as the store changes. The version published here is the current one.