Legal
Privacy Policy
What Dark Side Social stores, why, and who else is involved.
What we store
Your account (email, username, a hashed password — never the password itself), wallet balance and its transaction history, the orders you place (service, target link, quantity, price, delivery status), your tickets and their messages, coupon redemptions, and any reviews you submit.
What we don't ask for
Social media passwords, two-factor codes, or access to your accounts. Orders run entirely against public links.
Who else touches the data
Order details (target link, quantity, service) go to our upstream fulfilment provider to deliver the order. Transactional emails (order confirmations, ticket replies, password resets) are sent through Resend. Data is hosted on Supabase (EU region). We do not sell customer data.
Cookies
One session cookie keeps you signed in. No advertising or cross-site tracking cookies.
Security
Passwords are bcrypt-hashed, sessions are signed server-side tokens, database access is restricted to the application server, and staff actions on customer accounts are logged.
Retention & deletion
Accounts can be deleted on request through a support ticket; order records may be retained where needed for bookkeeping. Login-attempt records used for rate limiting are swept after 24 hours.
Contact
Privacy questions: open a support ticket from your dashboard.