Privacy

1. Who is responsible for your data?

cardcrrr LLC, registered in Delaware, United States, which runs AISubswithCrypto and its order service. Questions about your data go to [email protected].

2. What is my account?

A random 16-digit account number, created by the order service when you open an account. It is a secret login, so keep it like a password.

• Email and password are optional. If you set a password, every sign-in requires it. It is stored only as a salted hash.
• Sessions last 30 days. Session tokens are not stored in clear on the server. You can see your sessions and sign them out from your account.
• Recovery. Account recovery by email is not available yet. Store your account number safely.

3. What do you record for an order?

Only what selling and delivering the card needs:

• The card: issuer, country, currency, value and quantity, and the country you chose at checkout.
• The price: the USD total, the exchange rate and the time it was read.
• The invoice: coin, network, exact amount and expiry time.
• The payment: the transaction ID and its confirmation.
• The status: awaiting payment, processing, delivered, refund pending or refunded.
• Your consent: the policy version you accepted, your request for digital delivery, your region confirmation and the time.
• The code: stored encrypted, with the time you first revealed it.
• A refund, if any: the coin, network, amount, transaction ID and receiving address.

Your receipt shows the seller, the cards, the USD value and the consent record. It never shows a code.

4. How are delivered codes protected?

Each code is encrypted with AES-256-GCM before it is stored, and each encrypted code is tied to its order and its card. Order lists and receipts never contain codes.

A code is decrypted only when the signed-in account owner clicks Reveal code. That reveal is recorded with its time and the policy version. Anyone who sees a code can redeem it, so do not share it.

5. What do you never ask for?

• No identity checks. No KYC: no ID, no selfie, no email required, up to US$1,000 per order. No proof of address either.
• No AI or store passwords. We never sell, share or rent ChatGPT, Claude or other AI accounts, and we never ask for your login or password. We never ask for your Apple or Google password either.
• No wallet secrets. Never a recovery phrase or a private key.

Do not type passwords, recovery phrases, private keys or identity details anywhere on this site or in an email to us.

6. What stays in my browser?

A few preferences, stored in your own browser:

• Your country choice. It is pre-filled from your browser language and your own selection, not from IP geolocation.
• Your cart. Only the selected cards and quantities, kept for the browser session. No price, account, code or PIN is stored with it.
• Your sign-in session for the client area.

Links to official sources open the publishers' sites, which have their own privacy practices.

7. Are my crypto payments private?

Not on the blockchain itself. The networks behind BTC, USDT, USDC, ETH, SOL, LTC are public ledgers: anyone can see a transfer's addresses, amount and time. No KYC at checkout does not hide blockchain transactions.

The exchange you send from applies its own checks. When you redeem a card, Apple, Google or OpenAI apply their own account rules and privacy policies to your account.

8. How long are records kept?

Order, payment, delivery and refund records stay in your account history, so you can see your receipts. A retention period for each kind of record will be published on this page, with a date. So will the list of service providers that process them.

9. How can I ask about my data?

Email [email protected] with your order reference or a transaction ID, so we can find the records. We reply within 24 hours. Never send a code, a password or a recovery phrase in that email.

10. Can this policy change?

Yes. The date at the top of this page is the date of the version in force. The terms of sale carry their own version name, which is recorded with each order.