Privacy Policy

Last updated: 15 August 2026

This Policy explains how Kulenorvix ("we", "us", "the Site") — the party operating the online business at kulenorvix.com under that name — collects, uses, and protects information when you use the Site. By using the Site you agree to this Policy.

1. Our Core Commitment

We do not sell, rent, or trade your personal information, and we do not use it for advertising, profiling, or behavioural targeting. We do not provide your information to any third party for that third party's own commercial purposes.

We do not integrate any third-party ad network, social tracking pixel, or cross-site analytics tool.

To deliver the services you request, certain data must be processed by the service providers listed in section 4. Those providers may access data only to the extent necessary to provide services to us, and may not use it for their own purposes.

2. Territorial Scope

The Site does not serve mainland China and does not collect or process personal information of users targeted in that region. See section 1 of the Terms of Service.

3. Information We Collect

3.1 Information you provide

Account registration: email address, password (stored only as an irreversible hash — we cannot read your original password), display name, language preference.
Guest checkout: email address and an order lookup password (stored as a hash).
Two-factor authentication: the secret when enabled (stored encrypted) and recovery codes (stored hashed).
Product-specific forms: information expressly requested on the product page (such as an account name to top up). Please provide only what is necessary for that order.

3.2 Information generated automatically

Order and transaction records: order number, items, amount, currency, status, timestamps.
Payment records: channel, amount, status; for cryptocurrency payments, also the on-chain transaction hash and the sending and receiving addresses.
Site balance ledger: the amount, reason, and time of each credit and debit.
IP address: the client IP at the time of order, and a normalised IP used for risk control (IPv6 grouped by /64).
Login and security records: last login time and account activity logs.
Cumulative spending and top-up totals: used to calculate membership tier.

3.3 Third-party sign-in (only if you choose to use it)

Telegram / Google sign-in: we receive your unique identifier, username, and avatar URL from that platform. We never receive or store your password for that platform.

3.4 Support conversations (only if you initiate them)

When you start a conversation through our Telegram support bot, we record the link between the conversation and your order, and the messages exchanged, in order to handle your issue and retain a service record.

4. Service Providers We Rely On

The following categories of provider access data to the extent necessary for the Site to function:

Hosting and infrastructure providers — hosting the Site and its database;
Email delivery service — sending verification codes and order notifications (accesses your email address and message content);
Cloudflare Turnstile — bot detection (accesses IP and browser environment signals);
Telegram and Google — only when you use their sign-in or support features (access authentication requests and your public profile on that platform);
Payment channels — processing the payment method you select (access the information necessary to complete that payment);
Blockchain networks — necessary for cryptocurrency payments (see section 5).

We may also disclose information where legally required, where lawfully requested by a judicial authority through due process, or where necessary to protect our or others' legitimate interests (for example, fraud prevention and enforcement of our rights).

5. Important Notice About Blockchain Payments

Cryptocurrency transactions are recorded on a public blockchain and are public, permanent, immutable, and impossible to delete.

This means your sending address, the receiving address, the amount, and the time are visible to anyone, and no one — including us — can delete or alter them. This is an inherent property of blockchain technology, not a processing decision of ours. If you do not accept this, please choose a different payment method.

6. How We Use Information

to create and maintain your account and verify your identity;
to process orders, complete delivery, and produce transaction records;
to send notifications directly related to transactions (verification codes, order status, delivered content);
to provide customer support;
for fraud prevention and risk control — detecting fake orders, stolen cards, bulk registration, and chargeback abuse;
to calculate membership tiers and associated benefits;
to meet legal obligations and accounting retention requirements.

We do not use your information for purposes beyond those listed above.

7. Cookies and Local Storage

We use only the technical storage necessary to operate the Site:

Authentication cookie — keeps you signed in;
Language preference — remembers your chosen interface language;
Local storage — convenience data such as guest lookup email and cart contents, held in your browser.

We do not use advertising cookies, tracking pixels, or third-party analytics scripts. You may clear this data in your browser, though you may then need to sign in again or lose your cart contents.

8. Data Retention

Transaction and payment records — retained for 5 years from completion, for accounting reconciliation, dispute handling, and fraud prevention.
Account information — retained until your account is closed, after which the transaction record rules above apply.
Risk control records (including IP) — retained for 12 months.
Support conversations — retained for 12 months.

9. Security

passwords stored using an irreversible hashing algorithm; two-factor secrets stored encrypted;
HTTPS enforced site-wide;
role-based access control and audit logging for administrative actions;
rate limiting and bot detection on sensitive endpoints.

Please note that no system can guarantee absolute security. We are not liable for security incidents beyond our reasonable control, including compromise of your own device, disclosure of your credentials, or a breach at a third-party service.

10. Your Rights

You may:

review and correct your account information;
request deletion of your account;
request a copy of your personal information.

The following is retained even after a deletion request: transaction records necessary for legal obligations, accounting retention, dispute handling, and fraud prevention; and on-chain data already written to a blockchain, which cannot technically be deleted.

10.1 Rights Under U.S. State Privacy Laws

Our servers are located in the United States and our operations are subject to U.S. law. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, or another state with comprehensive privacy legislation in force, you have the following rights to the extent provided by that state's law:

Right to know — what categories of personal information we collect, and the purposes and sources of collection;
Right of access — to obtain a copy of the personal information we hold about you;
Right to correct — to have inaccurate personal information corrected;
Right to delete — to have your personal information deleted, subject to the retention exceptions listed in section 10;
Right to non-discrimination — exercising these rights will not result in different pricing, discounts, or service quality.

Regarding "sale" and "sharing": we do not sell your personal information, and we do not share it for cross-context behavioural advertising — using those terms as defined in the California Consumer Privacy Act (CCPA/CPRA). Accordingly, the Site does not provide a "Do Not Sell or Share My Personal Information" link, because there is no such activity to opt out of.

We do not use your personal information for profiling in furtherance of automated decisions that produce legal effects concerning you, and we do not process sensitive personal information for purposes beyond those listed in section 6 of this Policy.

To exercise these rights, contact us using section 13. To protect your account, we will verify your identity before responding; you may use an authorised agent, and we may require written proof of that authorisation.

11. Minors

The Site is not directed at persons under 18. We do not knowingly collect information from minors. If we become aware of such a case, we will delete the information and close the account.

12. Changes to This Policy

We may update this Policy from time to time. Updates take effect when published on the Site. Your continued use of the Site after an update constitutes acceptance of the updated Policy.

13. Contact

For any question about this Policy or to exercise your rights:

We do not publish a contact email address. All contact is handled through our Telegram support channel:

click "Contact support" on any order page — your conversation is linked directly to that order, so there is no need to quote an order number;
or search for @kulenor_support_bot in Telegram and start a conversation.

Notices and complaints under these Terms, and requests to exercise your personal information rights under the Privacy Policy, are all submitted through this channel. To protect your account, we verify your identity before acting on any request concerning an account, an order, or personal information.