Privacy Policy

FastAlts operates https://fastalts.com and is the controller of the personal data described here. Privacy questions: [email protected].

• Account data — email address, display name, optional country, notification preferences, and a salted hash of your password (never the password itself).
• Order data — what you bought or sold, amounts, timestamps, escrow and dispute history.
• Payment data — handled by our payment provider (Stripe). Eligible payment methods may be retained securely by Stripe for a later repeat purchase that you explicitly confirm on FastAlts. We receive payment references and status; full card numbers never touch our servers.
• Delivered credentials — the account credentials a seller uploads for delivery are stored encrypted and are only decrypted to show them to the buyer of a completed order.
• Security and purchase-authorisation data — IP address, a first-party device identifier, hashes of authenticated session and user-agent values, purchase and confirmation timestamps, the disclosure shown for a repeat purchase, credential-reveal access timestamps, and fraud/risk decision metadata. We store hashes rather than raw authentication or device cookie values. This data is used for account security, fraud prevention, purchase-authorisation evidence and dispute handling.

• To run the marketplace: orders, delivery, escrow, payouts (contract).
• To send transactional email — verification, password reset, order updates (contract).
• To prevent fraud and abuse, secure saved-card purchases, investigate disputed authorisation, and meet accounting obligations (legitimate interest / legal obligation).
• Optional marketing emails only with your consent, controlled from the settings page.

We do not sell personal data and we do not run third-party advertising.

The Service uses essential cookies only: a session cookie that keeps you signed in, a first-party security device cookie used to protect saved-card repeat purchases, and a preference cookie remembering that you dismissed the cookie notice. The security cookie contains a random identifier; order records store only its hash. There are no analytics or advertising cookies, which is why there is no consent pop-up wall.

• Stripe — payment processing (their privacy policy applies to the payment itself).
• Transactional email provider (Resend or Mailgun) — email delivery, depending on the provider configured by FastAlts (your email address and the message content).
• Brevo — optional website activity tracking and browser push delivery when you explicitly enable instant notifications.
• Infrastructure providers — hosting and content delivery, bound by data-processing agreements.
• Authorities, where the law requires it.

• Account data: for the life of the account.
• Order, payout and purchase-security evidence: retained after account deletion as long as reasonably needed for accounting, fraud prevention, payment disputes and applicable legal obligations.
• On account deletion, your profile is anonymized — name and email are replaced with non-identifying values while order integrity is preserved.

Depending on where you live, you may have the right to access, correct, export or erase your personal data, and to object to or restrict certain processing. Write to [email protected] — we respond within a month. You can also delete your account directly from the settings page.

Material changes to this policy are announced on the Service and take effect on the date shown above.