What we hold, and for how long.

The shop is built to hold as little as possible, so a breach would have little to give away. This is the full list.

Stored for each order

• A random order ID, plus the items you bought and their dollar price.
• A hash of your order link, never the link. Without the link itself no one can open your order page, and that includes us.
• Your gift link or code, encrypted, until 7 days after the first time you reveal it.
• An X @handle, for X Premium gifts only, since X asks for it.
• Your email address, collected at checkout so we can send your order link and tell you when the payment lands and the order is ready. Stored encrypted, never used for marketing, and erased 14 days after delivery. Each email is wiped from our outbox the moment it goes out.
• A recovery email or passphrase, if you choose to set one. Encrypted, and erased on delivery.
• A refund address, if you give one. Encrypted.
• A vendor payment link, only for plans paid at the vendor’s own checkout. Encrypted, and erased once we’ve paid it.

A completed order is wiped entirely after 30 days, an unpaid one after 48 hours. You don’t have to wait: you can erase a finished order from its own page whenever you like.

Once an order is gone, all that remains is an anonymous daily tally per product: how many orders, their status and their total value. No order ID, link, email or payment address is attached to it.

Never collected

• Your name, an account, a password or a card. The only personal detail is the order email.
• Ad trackers, pixels and third-party fonts. Analytics too, unless you switch it on (see below).
• Your IP address in our database or application logs. To stop abuse we use it only in memory, scrambled.

Analytics and the human check

• Google Analytics stays off until you press Allow on the bar at the bottom of the page. From then on it sets first-party cookies (_ga) to count visits and show which pages are useful. Advertising features and Google Signals are disabled. It never loads on order pages, the admin area or the onion site, and private links are stripped before anything is sent. A Global Privacy Control or Do Not Track signal from your browser keeps it off. You can change your answer any time under “Analytics settings” at the foot of every page; choosing no deletes the cookies.
• Your answer is kept in a single cookie (aiwb_consent) for 180 days.
• Cloudflare Turnstile confirms a human is behind the contact form, a service suggestion, an order lookup or a checkout. It loads in a Cloudflare frame on those forms and nowhere else, using signals Cloudflare describes as strictly necessary for stopping bots (your IP address and browser details, for example), and never for ads. The onion site doesn’t use it.

Third parties, and what each one sees

• Cloudflare serves our pages as a CDN, so it handles your IP address to deliver them and fend off attacks. It also runs the Turnstile check on the few forms above.
• Google gets page views, and only once you’ve allowed analytics.
• Payments in Bitcoin, USDT, USDC, Monero, Ethereum, Solana and TRON land directly in wallets we control, and we verify them against the public chain. No payment company sits in between.
• NOWPayments processes USDT on Arbitrum One, USDT on TON, USDC on Arbitrum One, Dai, BNB, Litecoin, Dogecoin, Cardano, Bitcoin Cash, Dash, XRP, Toncoin and Shiba Inu for us. It gets the order number and the amount. Your email never reaches it.
• The blockchain is public, so anyone can see your payment transaction, as with any on-chain payment. With Monero, the amount and the sender stay hidden.
• The vendor (Anthropic, OpenAI, Google, X, Microsoft…) gets no payment details from us. Redeeming or activating the plan is between you and the vendor, under its own privacy policy.