Privacy Policy

1. Who we are

Cora Gift ("we", "us") operates this website and sells digital gift cards, game top-ups and subscriptions. For any question about this policy, write to support@coragift.com.

2. Information we collect

• Account data: your email address and a securely hashed password. We never store your password in readable form.
• Order data: the products you buy, amounts, order status and the delivery details we send you.
• Support data: the messages you send in live chat or by email.
• Technical data: your IP address and browser information, used for security, fraud prevention and to operate the captcha.

3. Payments

Card payments are processed by Stripe. Your card number is entered into Stripe's secure fields and goes directly to Stripe — it never reaches or is stored on our servers. We receive a payment reference and the payment status. Stripe processes your data under its own privacy policy.

4. How we use your information

• to create and secure your account, and to verify your email address;
• to process, review and deliver your orders and to send order emails;
• to answer your support requests;
• to detect and prevent fraud and abuse, and to protect our customers;
• to meet our legal and accounting obligations.

5. Service providers

We share data only with providers that help us run the service, and only as needed:

• Stripe — payment processing;
• Google reCAPTCHA — bot protection on sign-in, registration and checkout (subject to Google's privacy policy and terms);
• our email delivery provider — to send verification codes and order emails;
• our hosting providers — to run the website and store data.

We do not sell your personal information.

6. Cookies and local storage

We do not use advertising or tracking cookies. To keep you signed in, your browser stores a session token in its local storage; it is removed when you log out. Google reCAPTCHA may set its own cookies to tell humans from bots.

7. How long we keep data

We keep account, order and support records for as long as your account is open and for as long afterwards as we need them for accounting, dispute handling and legal requirements. Unverified sign-ups may be removed sooner.

8. Security

Traffic is encrypted, passwords are hashed, payments are verified with 3-D Secure and access to our management tools is restricted. No system is perfectly secure, but we work to protect your information.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To use these rights, contact us at support@coragift.com. We may need to keep some records where the law requires it.

10. Children

The service is not intended for people under 18, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Material changes will be highlighted on the site. See also our Terms of Service.