Privacy
A concise description of data used by this storefront.
Cart and session data
The browser stores the current cart. A server-side session binds invoice creation and status access to the appropriate order.
Encrypted delivery details
When checkout is enabled, delivery details are encrypted in the browser with the configured OpenPGP public key. The webshop stores the encrypted delivery envelope, while the matching private key remains outside the webshop server. Encrypted personal data is still personal data and is handled accordingly.
Order records
Order contents, country, shipping choice, payment state, fulfillment milestones, security logs, and the encrypted delivery envelope are retained so an order can be fulfilled and a pending payment can recover after a refresh or restart. The retention period must be finalized before checkout is enabled.
Private tracking
The public tracking page receives the private code in a POST request and returns only fulfillment milestones. The database stores a keyed lookup of that code, not the plaintext code, and the public response excludes recipient details, contents, totals, and invoice identifiers.
Payment service
Enabled payment methods are displayed by the configured BTCPay Server at invoice time. This storefront does not ask for or store card details.
Carrier disclosure
A shipping carrier necessarily receives the recipient and delivery details needed to transport a parcel. Browser-side encryption does not make an order anonymous and does not remove legal recordkeeping obligations.