Privacy Policy

1. Introduction

Welcome to HyperCodeStore's Privacy Policy. This policy describes how HyperCodeStore ("we", "us", "our"), operated by Ronald Zoltán Farkas, collects, uses, shares, and protects your personal information when you use our website and services (collectively, the "Platform").

Our Commitment: We are committed to protecting your privacy and handling your personal data transparently and responsibly. This Privacy Policy complies with:

• General Data Protection Regulation (GDPR) for users in the European Union
• California Consumer Privacy Act (CCPA) for users in California
• Applicable Hungarian data protection laws

2. Information We Collect

2.1 Information You Provide Directly

Account Registration: Full name, email address, password (encrypted), username/display name, profile picture (optional), country/location.

Vendor Information: PayPal email address or bank account details (for payouts), tax identification information (if required), business name (if applicable), phone number (optional).

Payment Information: Billing name and address, payment method details (processed by Stripe; we never see or store full card numbers). Seller payouts are sent by PayPal or bank transfer.

2.2 Information Collected Automatically

Usage Data: Pages visited, time spent, search queries, assets viewed and purchased, click patterns, referral source.

Device Information: IP address, browser type and version, operating system, device type, screen resolution, language preferences, time zone.

2.3 Information from Third Parties

Google Login (OAuth): If you register using Google, we receive: name, email address, profile picture, Google account ID.

3. How We Use Your Information

• To Provide and Improve Services: Create and manage your account, process transactions, deliver purchased Assets, provide customer support
• For Platform Operation: Maintain security, prevent fraud, monitor usage trends, improve user experience
• For Marketing: Send promotional emails (with consent), display personalized content and recommendations
• For Legal and Compliance: Comply with legal obligations, enforce Terms of Service, resolve disputes

4. How We Share Your Information

We do not sell your personal information to third parties. We share information only in the following circumstances:

• With Service Providers: Stripe, PayPal, email service providers, cloud storage services, Google OAuth
• Public Information: Vendor profiles, asset listings, reviews and ratings
• For Legal Reasons: When required by law or to protect rights, property, or safety
• Business Transfers: In case of merger, acquisition, or sale of assets
• Intellectual Property Notices: When someone reports a listing, we keep the notice (the notifier's name, contact details and statements) to handle it as the law requires. If we act on it, we tell the seller what was claimed and by whom (name or company). If the seller files a counter-notice, we send it, including the seller's name, postal address, email and phone number, to the person who complained, so that they can pursue the matter with the seller directly. Legal basis: legal obligation (EU Digital Services Act, Hungarian Act CVIII of 2001) and our legitimate interest in handling rights disputes; sellers agree to this in the Seller Agreement.
• Seller Agreement Records: We record which version of the Seller Agreement a seller accepted, when, and from which browser, as proof of the contract.
• Referral Programme: We record who invited whom, the qualifying transaction, rewards and store credit, and signals used to prevent abuse (such as a fingerprint of the payment card, never the card number), to run the programme and pay rewards.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Upon account deletion, we retain your data for 30 days to allow recovery, after which personal information is permanently deleted, except transaction records (retained for 7 years for tax purposes).

6. Your Rights and Choices

For All Users:

• Access and portability of your data
• Correction of inaccurate information
• Deletion of your personal information
• Object to certain processing
• Withdraw consent

GDPR Rights (EU Users):

Right to restriction, and the right to lodge a complaint with a data protection authority: in Hungary the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu), or the authority of the EU country where you live or work.

CCPA Rights (California Users):

Right to know, right to delete, right to opt-out, right to non-discrimination.

7. Data Security

We implement reasonable security measures including encryption (TLS/SSL), password hashing, access controls, and secure payment processing through Stripe (PCI DSS-compliant).

If a personal data breach happens, we notify the data protection authority within 72 hours where the law requires it, and we tell affected users without undue delay when the breach is likely to put them at high risk.

8. Cookies and Tracking

We use cookies for essential functionality (login, cart), preferences, analytics, and advertising. Advertising cookies come from Google Ads, Meta (Facebook/Instagram), Microsoft Advertising and Reddit; they measure whether an ad led to a purchase and let us show ads to people who visited the store. In the EEA, UK and Switzerland they are set only after you accept them in the cookie banner. You can change your choice at any time with the "Cookie Settings" link in the footer, or through your browser settings. If you accept advertising cookies while signed in, the Meta pixel also receives your email address and account ID, which it hashes (turns into an unreadable code) before sending, so Meta can match the visit or purchase to a Meta account; the same hashed data is sent with purchase events from our server.

9. Children's Privacy

HyperCodeStore is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. Continued use of the Platform after changes constitutes acceptance.

11. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at ragendom@gmail.com.