Data deletion

Send the request from the account page while signed in, or from the email address the account uses. We only act on a request that proves control of the account - otherwise the deletion feature becomes a way for somebody else to destroy your order history.

The account itself, the email address, the password hash, the sign-in history, any linked Google identity, and the destination links you submitted with your orders. After it runs, the account cannot be signed into and nothing about it is recoverable, including by us.

The financial record of what was paid and what was charged, with the order amounts and dates, kept in a form that is no longer attached to your identity. This is bookkeeping, not profiling: a business that cannot say what it was paid has no accounts. Nothing in that record identifies you once the account is gone.

Deleting an account with a positive balance forfeits it. Cryptocurrency is one-way at the point of settlement and we do not hold a refund rail to send it back. If there is a balance you care about, spend it before you ask for deletion.

We do not delete an account while an order is in progress, because the order cannot be followed or refilled afterwards. Either wait for the orders to finish or ask us to cancel them first, which returns the undelivered part to the balance.

Up to thirty days from a verified request. In practice it is much faster; the window exists because deletion is irreversible and is done deliberately rather than automatically.