Privacy Policy
Last updated: September 2026
This policy describes the information processed when you browse keycrop.net, create an account, make a purchase, or contact support.
1. Information we process
We process information you provide, such as your account name, email address, password hash, support messages, and order details. We also process transaction and balance records, product activity needed to operate requested features, and technical information such as IP address, request time, browser or device data, security events, and referral or storefront attribution.
2. Why we use it
We use this information to provide accounts and purchases, deliver digital goods, operate support and requested notifications, maintain transaction records, prevent fraud and abuse, secure the service, diagnose failures, and meet obligations that apply to the service. We do not sell personal information.
3. Account and transport security
Account passwords are stored as scrypt hashes rather than plain text. Connections to the public site use HTTPS. Access to administrative functions is restricted. No online service can promise absolute security, so use a unique password and report suspected account access promptly.
4. Cookies and similar storage
KeyCrop uses a session cookie to keep you signed in and a locale cookie to retain the selected language or regional route. When you use referral or partner-shop links, referral and shop-attribution cookies record the referring code or storefront so the related price and commission rules can be applied. A short-lived state cookie is used if you choose Google sign-in. These cookies support the requested service and attribution features; blocking them may prevent sign-in, localisation, or partner checkout from working as intended.
4A. Optional Smart Stock Alerts
With your consent, KeyCrop may record bounded product-interest events, such as a sold-out view, restock request, wishlist add, related-product click, or buy click, to select a one-shot stock alert or relevant suggestion. This interest record does not attach your IP address, User-Agent, referrer, raw page URL, or a general clickstream. You can turn Smart Stock Alerts off in account settings. Turning it off stops new interest records and personalised sends; security, order, and required transaction records follow the retention rules below.
4B. Public storefront analytics
Yandex Metrica (counter 112362360) measures visits and interactions on selected public storefront pages for signed-out visitors on keycrop.net and www.keycrop.net. It can use cookies and process network and browser information, click maps, link interactions, and Session Replay. Storefront content and input contents are masked in replay. JavaScript tracking excludes pages with query strings or fragments, sign-in and registration, accounts, administration, API panels, support, payment and delivery flows. Pageview URLs omit query strings and fragments; referrers are reduced to an eligible public page or an external origin. The integration does not send customer identities or purchase events. With JavaScript disabled, an eligible public page may send a counter image request without account data or a referrer. Browser tracking protection may block analytics. Contact [email protected] about privacy choices.
5. Service providers
Cloudflare may process network and browser information for content delivery, security, and Turnstile human-verification checks. A payment provider selected during top-up processes the payment information required for that transaction; KeyCrop does not store full payment-card numbers. Email, Google sign-in, and Telegram notification or linking services process relevant data only when those features are used. Each provider handles data under its own terms and privacy notice.
6. Retention
We keep account and operational data while it is needed to provide the service. Transaction, fraud-prevention, security, dispute, and backup records may be retained after account closure where reasonably needed or legally required. Retention periods vary by record type and context.
7. Your choices and rights
You can update available account settings and disable optional notifications. Depending on the law that applies to you, you may be able to request access, correction, deletion, restriction, objection, or a copy of personal data. Requests can be sent to [email protected] and may require identity verification. Some records cannot be deleted immediately where retention is required for security, transactions, disputes, or law.
8. Policy changes
We may revise this policy when the service or its data practices change. The current version and its update date are published on this page. Material changes may also be announced through the service where appropriate.
9. Contact
For privacy questions or data requests, email [email protected] or open a support ticket from your account.
