# Privacy Policy
Last updated: October 19, 2026
**1. Data controller.** HomerServices (legal details in our Legal Notice). Contact for any privacy request: homerservices@proton.me
**2. Data we collect.**
| Data | Why | Legal basis |
| --- | --- | --- |
| Email address | Deliver your product, send order confirmation, support | Performance of the contract |
| Order details (product, amount, date) | Order history, accounting, warranty | Contract + legal obligation |
| IP address, browser, device data | Fraud prevention, security | Legitimate interest |
| Proof of delivery (timestamps, IP, device, product views) | Prove delivery and defend payment disputes | Legitimate interest |
| Payment data | Processed directly by the payment provider; we only receive a transaction ID and status | Contract |
| Discord ID (if you contact us there) | Support and reseller program | Contract / consent |
| Cookies | See Cookie Policy | Consent or strict necessity |
**3. Who receives your data.** Only the providers needed to run the store: SellAuth (store platform and hosting), payment providers (card processor, PayPal, crypto gateway), email delivery services and fraud-prevention tools. We never sell your data.
**4. Transfers outside the EU.** Some providers may be located outside the European Union. In that case, transfers rely on safeguards recognised by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.
**5. Retention.** Order and invoice data: 10 years (French accounting law). Support messages: 3 years after the last contact. Fraud-prevention data: up to 1 year. Cookies: up to 13 months.
**6. Your rights.** You can access, correct, delete, restrict or object to the use of your data, and ask for data portability. Email homerservices@proton.me with your request; we answer within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).
**7. Security.** We use the security measures of our platform and providers (HTTPS encryption, restricted access). No method is 100% secure, but we act quickly in case of an incident.
**8. Minors.** The store is not intended for children under 15. We do not knowingly collect their data without parental consent.
**9. Changes.** We may update this policy. The date at the top shows the latest version.