Privacy
The data controller is the shop owner. Contact details are on the Contact page. We collect as little as possible.
What we store
- Orders: order number, products and prices, payment status, the NOWPayments payment ID and coin used, timestamps, and a record that you accepted the terms and the immediate-delivery consent. Your private order link is stored only in scrambled (hashed) form.
- Contact messages: the topic, your message, an order number if you add one, and our replies. You read replies through a private ticket link (stored only in scrambled form). To stop spam, we count messages per visitor using a scrambled value derived from your IP address. It changes every day and is deleted after the day ends.
- Not stored: no names, emails, IP addresses, wallet addresses or accounts. You don't need to connect a wallet.
Why (legal basis)
To deliver what you bought and answer your messages (GDPR Art. 6(1)(b), contract), to keep accounting records required by Norwegian bookkeeping law (Art. 6(1)(c), legal obligation), and to prevent spam and abuse (Art. 6(1)(f), legitimate interest).
Who else processes data
- Cloudflare hosts the shop and necessarily handles your IP address to deliver pages and protect against abuse. It may process data outside the EEA under its standard data protection terms.
- NOWPayments processes your payment as an independent controller under its own privacy policy. Blockchain transactions are public by nature.
- Discord: when you send a contact message, its topic and ticket number (never the message text) are posted to a private Discord channel so the seller gets notified. Discord may process this outside the EEA. Don't put personal details in the topic.
The website loads no analytics, advertising, social-media or other third-party scripts, fonts or trackers. Everything is served from the shop itself.
Cookies and storage on your device
The shop sets no cookies. A few items are kept in your browser's storage, only to make features you use work. Because they are strictly necessary for those features and are not used for tracking, no consent banner is needed.
- ba.cart
- Your cart. Kept until you check out or clear it.
- ba.orders
- Links to your last 20 orders on this device, so you can find your downloads again.
- ba.tickets
- Links to your last 20 contact conversations on this device.
Children
If you are under 13, please ask a parent or guardian before you buy or send us a message, and don't include personal details about yourself in messages. Buyers under 18 need a parent's or guardian's permission to make a purchase.
How long
Order records are kept for as long as Norwegian bookkeeping rules require (normally five years after the end of the financial year), so you can download again and for accounting. Contact conversations are deleted 12 months after the last message, or straight away if you delete them yourself.
Your rights, and deleting your data
- Delete a conversation yourself: open your private ticket link and press "Delete this conversation". It's removed immediately.
- Clear this device: use the button above.
- Anything else (access, correction, deletion, objection): send a message through the contact form with your order or ticket number. We delete what we're allowed to. Order records needed for bookkeeping are kept until the legal period ends. Never send your private order link.
You may also complain to the Norwegian Data Protection Authority (Datatilsynet).