BuffViet
VI EN
Sign in Sign up

Home › Privacy policy

Privacy policy

This page sets out what we collect, what we use it for, how long we keep it, and how you ask us to delete it. It is short and blunt on purpose — a policy nobody can read protects nobody.

1. What we store

  • Your email and a hashed password. Passwords are hashed with Argon2id — we have no way to read yours back.
  • The links you submit with orders (post, video or channel links) and the quantity you booked.
  • Your wallet and order history: every credit, charge and refund has a record.
  • The IP address of failed sign-in attempts, to block password guessing. These records delete themselves after a short time.
  • Your deposit reference, and the transfer description your bank sends us when you top up.

We do not ask for your social media password, do not ask for access to those accounts, and do not store card details — payment happens at your bank or on the blockchain, never through our servers.

2. What we use it for

  • Delivering the orders you place and charging you correctly.
  • Sending the emails that matter: address verification, password resets, order-completed notices.
  • Preventing fraud and abuse of the system.
  • Answering your complaints — we look them up by order ID.

We do not sell and do not share your data with third parties for advertising.

3. Who sees your data

To deliver an order, the public link you submit and the quantity are passed to the party carrying out the service. Your email, password, wallet balance and transaction history go nowhere.

We also use an email delivery service and a payment service; each sees only the data its job needs (an email address, or a transfer).

4. How long we keep it

  • Order and wallet history: kept for as long as the account is active, because it is the record of what was charged and what was refunded.
  • Failed sign-in records: a few days.
  • After you ask us to delete your account: we remove your email and sign-in details; financial records are kept in a form no longer tied to your identity.

5. Your rights

  • See your own data: every order and transaction is already visible when you sign in.
  • Change your email or password under Account.
  • Request account deletion — contact support and we handle it within 7 working days.
  • Withdraw an unused balance: see the Refund policy.

6. Cookies

We set only the cookies the site needs to work: keeping you signed in, protecting forms against CSRF, and remembering which currency you chose. There are no advertising cookies and no third-party trackers.

7. The browser extension

Our extension stores your API key and the site address in your own browser's storage. It reads the address of the current tab only when you click the extension icon, to work out which platform you are on. It does not read page content, does not track your browsing, and sends data nowhere except this website.

8. Keeping it safe

Everything runs over HTTPS. Passwords are stored hashed. Accounts can enable two-factor authentication. Changing your password signs out every other device. Even so, no system is perfectly safe — use a password unique to this site.

9. Contact

Send any request about your personal data to support.