BuyDigitalStuff

Privacy policy

1. Controller

Simon Lederer - BuyDigitalStuff, trading as “BuyDigitalStuff”
Zugspitzweg 18, 83533 Edling, Deutschland
Germany
Email: support@buydigitalstuff.com
Phone: +49 160 7768954

2. What this service does

This service provides an email mailbox for a user account you have purchased from us, through which you receive recovery and confirmation messages. The service does not send any emails itself. It only accepts messages and shows them to you after you sign in.

3. Hosting and accessing the pages

The service runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When you access these pages, the server technically processes your IP address, the date and time of access, the page requested and details of your browser in order to deliver the page. This data is processed only for the duration of the connection; we do not keep access logs containing your IP address. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing a working and secure mailbox.

To protect against attacks and overload, requests to these pages pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes your IP address and the technical details of the request on our behalf (Art. 28 GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework, and the EU Commission's standard contractual clauses apply in addition. Incoming emails do not pass through Cloudflare. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the service against attacks and overload.

4. What data is processed

  • Mailbox address and access password generated for your order. The password is stored only as a cryptographic hash, never in plain text.
  • Incoming messages to this mailbox including sender, subject and content. They may contain personal data transmitted by the respective sender (e.g. the account's platform).
  • Access credentials of the handed over account, stored temporarily and encrypted while the switch to your address is in progress.
  • A technical order key for assignment.

5. Purpose and legal basis

The processing serves solely to perform the purchase contract, i.e. to hand over the purchased account to you (Art. 6(1)(b) GDPR). There is no tracking, no advertising and no disclosure to third parties for other purposes.

6. Storage period

The mailbox and its contents are deleted automatically 30 days after the order. After that, access is no longer possible. For security reasons, a mailbox address is never assigned again.

7. Cookies

We only use cookies that are strictly necessary for the service:

  • Sign-in (“uebergabe_sitzung”): keeps you signed in to your mailbox, 12 hours; only after signing in.
  • Language (“postfach_sprache”): stores a language you have chosen, 1 year; only if you change the language.
  • Security check (“cf_clearance”, Cloudflare): only if Cloudflare shows a browser check during unusual traffic; records for a short time that the check was passed.

They are not used for analysis or advertising. The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(b) GDPR.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority (Art. 77). To exercise these rights, an email to support@buydigitalstuff.com is sufficient.

Last updated: 29 September 2026