How We Handle Your Data
In force from 19 October 2026
The data involved
An email address for each checkout. The details of every order: listing or service, quantity, amount, and for account orders the lines we deliver, which can include a username, password, mailbox password, 2FA key and a personal access token. For star, fork and follower orders, the public repository or profile link you type in. Any ticket you write. Request logs with IP address and browser. Payment confirmations come from the payment provider; we never receive card or wallet credentials.
Why we hold it
- To deliver accounts and show them on your order page.
- To hand a growth order to the service that fills it.
- To settle warranty claims, refunds and tickets.
- To detect payment fraud and meet accounting duties.
Processors
Payments, hosting and email are run by outside providers, each receiving only what its task needs. For a growth order, the delivery service receives the link and the quantity, nothing else. We do not sell, rent or trade personal data, and we never ask for your own GitHub password, token or codes.
Cookies
Only those needed for signing in, the cart and checkout security. There is no advertising or cross-site tracking.
Retention and requests
Delivered lines stay on file until no claim on the order is possible; financial records as long as the law requires; logs briefly. For a copy, a correction or deletion, contact support@buygithub.net or the Contact page using the email address on your order.