Privacy & Cookie Policy

1. Website operator

KEYS4COINS AS
Norwegian private limited company (Aksjeselskap, AS)
Organisation number: 921 725 396
Svalestien 27, 1407 Vinterbro, Norway
Municipality: Ås
Email: info@legal.keys4coins.no

This policy covers keyhub-sale.com and the account, order, support and email services we operate. It does not cover third-party websites and their independent services.

2. Information we process and why

• Accounts: email, profile details you provide, password-verification data, confirmation records and sessions, used to operate and secure accounts.
• Orders: products, plans, quantity, price, order status, purchase email and, if needed, the receiving account’s email. These support payment, delivery, customer service and transaction records.
• Payments: provider references, status and relevant cryptocurrency transaction details. Hosted providers process payments. We do not request private keys or seed phrases; the current checkout does not collect card numbers.
• Support and emails: messages, attachments and email-delivery records needed to answer requests and provide registration/order updates. Registration emails may contain a temporary password; protect your inbox and replace that password.
• Technical data: IP address, browser/device and request information processed for hosting and security; cookies/browser storage needed for sessions, the cart and preferences.
• Internal analytics: only with your consent, we keep page paths, product-view and cart/checkout events, coarse device category, referring website and campaign labels on our own server for up to 90 days. A random identifier in session storage groups activity in the same browser tab into a visit, ending after 30 minutes of inactivity or 24 hours. We do not store IP addresses, full URLs, search text, form contents, account identifiers or private order links in this analytics database. IP addresses are processed transiently to limit abusive requests. We do not record your screen or keystrokes.
• Advertising: only with your consent, Meta Pixel can process public-page visits, product views, cart additions, browser identifiers and related device/network data to measure advertising and support audience-related functions.

Sources are you, your browser/device and providers handling these services. An account is optional. Necessary contact/order information is required to fulfill a purchase; optional advertising tracking is not required to shop.

Legal bases

KEYS4COINS AS is the controller. We process account and order information to perform or enter into a contract, keep required transaction records to meet legal obligations, and process proportionate security data for our legitimate interests in protecting the service. Optional analytics and marketing tracking rely on consent, which can be withdrawn at any time.

3. Recipients

Information is processed by hosting/security providers including Cloudflare, email provider Resend, payment provider NOWPayments, and Meta when advertising tracking is enabled. An upgrade or invitation may require sharing the receiving email with the provider or fulfillment party responsible for that item. Necessary records may also be disclosed for legal obligations, fraud prevention, professional advice or a business transfer subject to appropriate protections.

We do not exchange customer records for monetary payment. Advertising disclosures may nevertheless constitute “sale” or “sharing” under some laws. Use the controls below to stop optional internal analytics and Meta Pixel in this browser. We do not intentionally include passwords, emails, private order tokens or contact-form contents in advertising event payloads.

Cookies and similar storage

Optional analytics and marketing are off until you choose them in our cookie banner. “Reject optional” is available alongside “Accept all”; “Customize” lets you choose analytics and marketing separately. Essential storage supports your cart, account sessions, secure order access and consent preference. It cannot be disabled through this banner because it is needed for those features.

We store your versioned consent choice and its time in this browser for up to 180 days. Our first-party analytics uses a session-storage visit identifier with a 30-minute inactivity limit and 24-hour maximum visit; event data is retained for up to 90 days. If you allow marketing, Meta Pixel may use first-party identifiers such as _fbp and _fbc (typically up to 90 days) and process browser/network data on public pages. We do not load Meta Pixel on account, registration, cart or checkout pages.

You can reopen “Cookie settings” in the footer and withdraw either category at any time. Withdrawal stops future optional processing by this site; it does not undo processing already carried out. Your shopping access is unchanged.

4. Your Privacy Choices

You can turn off optional analytics and advertising tracking without losing shopping or account access. The choice is saved for this browser/device; clearing storage may reset it. We also disable optional internal analytics and Meta Pixel when your browser sends Global Privacy Control (GPC) or Do Not Track (DNT). Necessary security, account and payment processing still operate.

This choice stops future optional internal analytics and Meta Pixel activity by this site in this browser; it does not delete data already received by others or control their own sites. You can manage browser cookies and Meta’s privacy settings. Other parties may collect information across sites using their technologies when allowed.

5. Your rights and privacy requests

Contact info@legal.keys4coins.no to request access, correction or deletion, ask about our practices, or raise an opt-out concern. Depending on laws applicable to you and our business, additional rights may include knowing categories of data and recipients, obtaining a copy, restricting uses, opting out of sale/sharing or targeted advertising, and appealing decisions. We will explain our decision and any applicable appeal route in our response.

We may reasonably verify identity for access, correction or deletion to prevent disclosure to others. An advertising opt-out does not require an account. Authorized agents may contact us with evidence of authority where applicable. We will not discriminate for exercising applicable rights. Records may need to be retained for transactions, legal obligations or protection of rights.

Where the GDPR applies, you may also request restriction or portability and object to processing based on legitimate interests. You can complain to the Norwegian Data Protection Authority, Datatilsynet, or your competent supervisory authority.

6. Retention and security

We retain information as reasonably needed for account operation, fulfillment, support, financial/legal records and fraud prevention. Duration depends on the record and our obligations; deletion may not remove records lawfully required to be retained. We use access controls and other safeguards, but no online service or email system guarantees absolute security. Do not share credentials or private order links.

7. Children and international processing

The store is not directed to children under 13. Contact us if you believe a child supplied information so we can investigate and take appropriate action. The storefront targets the United States; providers may process data in the US and other locations where they operate.

8. Changes

We update the effective date when this policy changes. Material changes will be communicated through the site or another appropriate channel. A new policy does not retroactively authorize materially different uses where consent is required. Contact the company above with questions.