Privacy Policy

This policy explains what information MajalStore collects, why, who processes it on our behalf, and the choices you have. It applies to this store and to the emails we send you about your orders and your account.

1. Information we collect

You give us: your email address when you sign in; the name, phone number and language in your profile; the details a product needs, such as a player ID, server or region, an account email or a wallet identifier; the content of your support messages; and any receipt you upload for a manual payment.

Created when you order: your orders, order items and prices, delivery and activation records, invoices, coupons and loyalty points, referral attribution, and the status of each payment.

Collected automatically: your IP address, browser and device information, sign-in and authentication records, security and rate-limit logs, and error logs. These are needed to run the store and to protect it.

We do not run advertising or third-party analytics trackers on this store.

2. Payment information

Card payments are processed by our payment provider. Your full card number, expiry date and security code are entered on the provider's side and are never sent to us or stored by us. We keep only what we need to recognise a payment: its status, amount, currency, method, provider reference and timestamps. For digital-currency payments we keep the transaction reference and amount reported by the payment network.

3. Why we process it

• To take, deliver and support your orders, and to prove what was delivered.
• To create and secure your account, and to sign you in.
• To send transactional email: sign-in codes, order and delivery notices, invoices and account notices.
• To answer your support messages.
• To detect and prevent fraud, payment abuse and account takeover, and to keep the store available.
• To keep accounting and transaction records, and to meet legal, tax and regulatory obligations.

We process this information because it is necessary to perform the contract you enter into when you order, because we have a legitimate interest in running the store securely and preventing fraud, or because the law requires us to keep certain records. We do not sell your personal information, and we do not send marketing email without your agreement.

4. Cookies and local storage

We use only what the store needs to work. A cookie keeps you signed in after you enter your sign-in code, and a short-lived cookie records a referral code if you arrived through an affiliate link. Your browser's local storage holds your cart and your chosen appearance, and your language is part of the page address. We do not use advertising or tracking cookies.

5. Service providers

We use a small number of providers who process data on our behalf, under their own terms and security measures:

• Supabase — database, authentication, file storage and server functions.
• Vercel — hosting and delivery of the website.
• Resend — sending transactional email.
• Tap Payments — card payment processing.
• Binance Pay — digital-currency payment processing and verification.

We may also disclose information where we are legally required to, or where it is necessary to investigate fraud or to protect our rights, our customers or the store.

6. Where your information is processed

Our providers operate infrastructure outside the Kingdom of Saudi Arabia, so your information may be stored and processed abroad. We choose established providers and rely on their contractual and technical safeguards for such transfers.

7. Security

We protect the store with measures including sign-in by one-time email code, two-factor authentication for staff access, row-level access rules in the database, encryption in transit, encrypted storage of payment credentials, rate limiting, and audit and security logging. No online service can be completely secure, and we do not claim otherwise; but if a breach affects you we will act on it and inform you where we are required to.

8. How long we keep it

We keep personal and transactional information only for as long as is reasonably necessary to provide the service, maintain order and transaction records, prevent fraud, secure accounts, resolve disputes, answer support issues, and comply with accounting, tax, regulatory and legal obligations. Different information therefore has a different life: a sign-in code expires in minutes, while an order and its invoice are kept for as long as the applicable record-keeping rules require. When the purpose has ended, information is deleted, anonymised, or otherwise handled as the applicable law requires, unless a longer period is legally required.

9. Your rights

Subject to applicable law, you may ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, delete it, or restrict how we use it; and you may object to processing we carry out on the basis of a legitimate interest. You can update your own profile at any time from your account.

Please send requests to majalstoreapp@gmail.com from the email address registered on your account, so that we can be sure the request is yours. Some information cannot be deleted immediately where we are required to keep it — a paid order and its invoice, for example — and we will explain if that applies.

10. Children

The store is not intended for children under 18 purchasing on their own behalf. If you believe a child has provided us with personal information without the involvement of a parent or guardian, please contact us and we will deal with it.

11. Changes to this policy

We may update this policy as the store or the applicable rules change. The current version is always on this page, with the date it was last updated shown at the top.

12. Contact

For any question about this policy, or about your information, write to majalstoreapp@gmail.com. Our support hours and other channels are on the Contact Us page.