Legal
Privacy Policy
Last updated 2026-10-13
This policy explains how QuoraFame (“we”), the data controller for this website, processes personal data under the EU General Data Protection Regulation (GDPR) and Portuguese law (Lei n.º 58/2019). Contact for privacy matters: [email protected].
Data we collect
| Data | Why | Legal basis |
|---|---|---|
| Email address, name (optional), password hash | Account, order confirmations, sign-in links | Contract |
| Order details: public Quora links, quantities, text you supply, amounts, coupon/referral used | Delivering and supporting your order | Contract |
| Payment data: cryptocurrency, receiving address, transaction IDs and amounts (these are public on the blockchain) | Confirming payment, accounting, fraud prevention | Contract; legal obligation; legitimate interest |
| Support chat and ticket messages | Answering your questions | Contract; legitimate interest |
| IP address and basic request logs | Security, rate limiting, abuse prevention | Legitimate interest |
| Aggregated, cookieless usage statistics | Understanding which pages are useful | Legitimate interest |
We never ask for your Quora password. We don't sell personal data and don't use it for automated decisions with legal effects.
Who we share data with
- Fulfilment suppliers: the public link and quantity only, needed to deliver the order.
- Hosting and email providers that process data on our behalf under data processing agreements.
- Blockchain explorers and price APIs (for example Blockstream, Etherscan, TronGrid, public BSC and Solana RPC endpoints, CoinGecko). We send them only our receiving addresses and transaction IDs.
- Authorities, where the law requires it.
Some providers may process data outside the EEA. Where they do, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.
How long we keep data
- Accounting records of orders and payments: 10 years, as Portuguese tax law requires.
- Account data: while your account is open, and deleted within 30 days of a deletion request, except records we must keep.
- Support conversations: 2 years after the last message.
- Security logs: up to 90 days.
- Sign-in links expire after 15 minutes. Sessions expire after 30 days.
Cookies and local storage
We only use cookies that are needed for the Site to work, and we don't use advertising or tracking cookies. See the Cookie Policy.
Your rights
You have the right to access, correct, delete, restrict or object to processing of your data, and to data portability. Email [email protected] and we will reply within one month. You also have the right to complain to the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
Security
Passwords are hashed with scrypt. Session tokens are stored only as hashes. The Site is served over HTTPS with strict security headers, and access is rate limited. Our payment system is non-custodial and uses watch-only addresses.
Changes
We'll post updates here and change the date above. For significant changes we will email account holders.