What we do behind the scenes so you can buy, sell, and ship without worrying about the rest.
Account security
AES-256-GCM at rest
Every credential lives in our vault encrypted with a key never leaving the server. Logged each time you reveal one.
bcrypt passwords
Stored with a 10-round work factor. We never see your plaintext.
JWT-backed sessions
Cryptographically signed, HTTP-only, 30-day expiration with rotation on suspicious activity.
Per-user isolation
Vault entries, orders, and wallets are scoped — operators only see what they own.
Money & wallets
Wallet pool
Balances are tracked in cents in PostgreSQL with idempotent ADJUSTMENT/PURCHASE/REFUND transactions. Every change is auditable.
Crypto checkout
USDT (TRC20/ERC20), BTC, TON, LTC. Manual or webhook confirmation, never auto-credit before on-chain finality.
Audit log
Every admin action — credit, debit, refund, replacement — is logged with actor, timestamp and meta.
Warranty & replacement
Lifetime warranty per item
Each delivered account has a warranty window. If it dies before that, we replace at no cost.
No-refund policy
All sales are final. Once credentials are revealed, the product is considered consumed. Use the warranty for free replacements instead.
Don't change recovery info
If you change the recovery email, password reset becomes our problem to fix — and we can't push replacements remotely. Doing so voids warranty.
Two SLA tiers
Stocked items: replaced within minutes from the vault. Manual items: replaced within 24 hours by an operator.
Abuse & responsible use
No fraud, no resale
Accounts are for personal/business use. Reselling without authorization or using them to defraud third parties results in immediate ban without refund.
No content violating provider TOS
We don't ask, we don't want to know. But anything we receive a takedown for, we honor — and the underlying account is retired.
Reporting abuse
Spotted misuse of an account that came from us? Email or Telegram us — we'll retire it within hours.
Data & privacy
Minimum data
We collect what's necessary to deliver, support, and prevent fraud. No advertising trackers, no analytics resold to third parties.
Data export
Request your complete data and we'll ship a ZIP within 7 days.
Deletion on request
Account and historical data can be deleted on request. Some financial records are retained for legal compliance.