Privacy
Short version: we ask for the least we can get away with, we use one first-party cookie of our own to remember how you found us, we never sell or share ad or tracking cookies (the Microsoft Advertising UET tag sets its own cookies, _uetsid and _uetvid, and the Google Ads tag sets its conversion-measurement cookies), and we don't sell anything about you. The detail below is exact — if you find something on this site that contradicts it, email orders@shopvoltvault.com and we'll fix the page or the practice.
Current checkout uses crypto only. Crypto only: Bitcoin, USDC / USDT, Ethereum, Solana, USDT (TRON), or Cash App (eligible orders). Every order gets tracking, and our 30-day terms provide a full refund in crypto if the item does not arrive or is not as described. For help, email orders@shopvoltvault.com to reach our team.
What we never ask for
There are no accounts and no passwords on VoltVault. A normal order never needs ID: we never take card numbers, bank details, government ID or a Social Security number for an order — crypto payments go on-chain. Crypto only: Bitcoin, USDC / USDT, Ethereum, Solana, USDT (TRON), or Cash App (eligible orders). No card details are entered for a new order. The one exception is a payment plan application (see below), where we may ask for a photo of your ID for screening only. We don't build a marketing profile, we don't sell or rent data, and apart from the Microsoft Advertising and Google Ads measurement tags listed below we don't run advertising or retargeting pixels.
What we do collect
- What you send us to fulfil an order — your name, contact email, shipping address and destination country; the items, total and coin selected; and any transaction hash you provide. When you select Crypto and tap Save order and show payment address, or tap I've sent it, those details are saved with your order, and the first save sends one order-confirmation email to the address you entered (order number, items, total and the wallet address for your coin; a separate payment-confirmation receipt is sent after on-chain verification, followed by tracking when available). For crypto orders, the details reach our private order-alert inbox on Telegram only once your payment is confirmed on-chain, so we can ship the item. If you email support separately, that correspondence lives in our support inbox (orders@shopvoltvault.com). We do not use either for advertising.
- Your cart — stored in your own browser only, so it survives a page reload. It never leaves your device until you place an order. We also store how you found us (the referring site and campaign tags such as utm_source) on your device, in local storage and a first-party cookie for about 90 days, and with your order, to understand which channels bring buyers.
- A campaign-link label, when one applies — a link may contain a public
vv_campaignlabel from our fixed campaign list. If measurement is enabled, we keep only that label and its timestamp in this browser tab's session storage, replacing it when you follow another recognized campaign link. A label is valid for 24 hours; expired labels are discarded the next time the site checks them. Closing the tab normally clears its session storage, although a browser may restore it when restoring tabs. We do not copy arbitrary query values, the referring page, a visitor ID or browsing history into your order. If you place an order, the label is included in the private order alert and your saved/email order copy to help us compare promotion channels. It is an unverified link label, not proof of payment, an endorsement or a commission claim. It is not sent to an advertising service. - Aggregate page-view counts — which page was viewed, the site that linked you here, country, and rough device/browser type. Measured by Umami, served from our own domain, setting no cookie and no cross-site identifier. URL query strings and fragments are excluded from the counts, except the four public campaign-link labels (utm_source, utm_medium, utm_campaign, utm_content) when a link carries them. It is counting, not tracking: there is no profile, and we cannot tie a page view to an order or a person.
- A tally of a few checkout button presses — how many times Add to cart, Copy address, Continue to payment, I've sent it, Save order and show payment address, Download as a file and Open in your email app are pressed, and for the address button, which coin it was for. When an order is saved, we count that crypto was chosen; nothing else is attached. For orders placed through our earlier Whop card checkout (used until Oct 20, 2026), when you came back from card checkout on Whop, we counted whether it was completed or not, with no payment ID or amount (the Google Ads purchase conversion below is the one exception). Counted by Umami, cookieless and served from this domain. Public promotion-source and checkout-intent labels from a fixed list are counted as separate events, not additional page views. It is a counter and nothing more: no wallet address, no cart contents, no total, no email address and no shipping detail is ever attached to it. We read it to find the step of checkout that trips people up, and for nothing else. If you block the analytics script — or you have opted out of it — none of this is sent at all.
- Google Customer Reviews survey details, after a paid order — after our own order system confirms payment, the order-confirmation page offers Google's optional customer survey. To render that choice, it gives Google the five fields its free Customer Reviews module requires: our Merchant Center ID, your order reference, the order email, delivery country and estimated delivery date. We do not send Google your shipping address, phone, cart contents, payment method, order total or product GTINs through this module. If you choose yes in Google's prompt, Google may email the survey after the estimated delivery date. Choosing no does not affect your order, and we never offer money, a discount or any other incentive for a review.
Who else sees anything
The services outside VoltVault that receive data during the storefront's normal page and order flows, plus services that handled earlier card orders, are:
- Cloudflare — serves the site and its order API, receiving routine connection information such as your IP address and browser headers. When you save or place an order, its API processes the order details described above and passes them to our private order store.
- Supabase — hosts our private order database, storage endpoint and payment-verification function. Saved records contain the order reference, contact and shipping details, items, total, chosen coin and any transaction hash you provide. They are used for payment verification, support and fulfilment, not advertising.
- Umami — counts the page views and button presses above. Your browser never talks to them: the script and the counts are served and sent through this domain, and we forward the measurement on. They set no cookie and receive nothing that identifies you.
- Microsoft Advertising — we use Microsoft Advertising (UET) to measure ad performance. The tag sets its own cookies (_uetsid and _uetvid). See Microsoft's privacy statement.
- Microsoft Clarity — shows us, in aggregate, where shoppers tap and scroll on our product and info pages, plus masked replays of those pages, so we can fix confusing layouts. All page text and anything you type are masked before they leave your browser, it sets no cookies here, and it never runs on checkout or any order, payment or tracking page. It is not used for ads or linked to your order. See Microsoft's privacy statement.
- Google Ads — the Google tag measures whether a Google ad click led to a purchase (advertising conversion measurement, ad personalization signals off). It sets Google's conversion cookies (such as _gcl_au). When a crypto order you saved in this browser is confirmed paid on-chain while you are on our site, usually at checkout, it records one purchase conversion with your order reference as a de-duplication reference and the order total, and no name, email, phone or address. To know that, the page asks our own order system for that order's payment status. If you arrived from a Google ad, the ad's click ID (gclid, gbraid or wbraid from the link) is saved in this browser for up to 90 days; when you save an order, that click ID is sent to our Cloudflare Worker together with your order reference and the time, and kept in our private Cloudflare store for up to 90 days (for orders placed through our earlier Whop card checkout, used until Oct 20, 2026, it was sent with the Whop plan or Whop's payment ID instead). We use it only to report that purchase to Google Ads as one offline conversion (click ID, purchase time, value and order reference or an earlier Whop payment ID; no name, email or address). It does not load, and no click ID is saved or sent, when your browser signals Do Not Track or Global Privacy Control. See Google's privacy policy.
- Google Customer Reviews — receives the five paid-order fields listed above so it can display its survey choice and, only if you opt in there, email you a purchase-experience survey after the estimated delivery date. The survey is voluntary and is separate from Google Ads conversion measurement. In connection with the module, Google may place or read cookies in your browser or use web beacons. See Google's privacy policy; your browser's privacy or cookie settings let you view, block or clear cookies, and you can simply choose no in the survey prompt.
- Whop — ran our earlier card checkout (used until Oct 20, 2026; it still applies to card orders placed before then). For orders placed while card checkout was active, Whop sent our Cloudflare Worker a signed payment notification with the payment ID, item, plan, amount, your email, name and shipping address. The Worker saved that order in our private Cloudflare store and emailed it to our order inbox (orders@shopvoltvault.com) through AgentMail so we can ship it, honour the 30-day money-back guarantee and answer questions about it. It is not used for advertising. See Whop's own privacy policy on its website.
- Stripe — handled our earlier card checkout. For card orders placed while it was active, Stripe received the card details, name and delivery address; our Cloudflare Worker received the order reference, amount, currency, payment status, Stripe transaction ID, name and delivery address. We checked those details with Stripe and kept a one-line notification record (order reference, amount, status and transaction ID) in our private Cloudflare store for up to 90 days so we could fulfil and support those orders. Crypto only: Bitcoin, USDC / USDT, Ethereum, Solana, USDT (TRON), or Cash App (eligible orders). It was not used for advertising. See Stripe's privacy statement.
- Payment plan applications — if you apply for a payment plan (pay in 4 with crypto) on /payment-plans, we collect your name, email, phone, country, shipping address, the device you chose and a photo of your ID. We use them only to review your application, ship your device and remind you before each payment is due. The application and ID photo are emailed to our private orders inbox (orders@shopvoltvault.com) through AgentMail and kept in our private Cloudflare store; the ID photo is never posted or available at any public address, and is removed from the Cloudflare store once our team has saved it (and after 45 days at most). We use the ID photo only to screen your application; it is used for nothing else and never shared. Applicant personal details, including any ID photo, are deleted 90 days after a plan is fully paid, or 45 days after a declined application. Routine connection information (such as your IP address) is used briefly, hashed, for rate limiting. Nothing is sold or used for advertising.
- Support chat — the optional chat button on this site is our own widget, served from this domain (no third-party chat service). If you open it and send a message, the message goes to our Cloudflare Worker, where Cloudflare Workers AI drafts the automated reply; your recent chat messages are kept in this browser tab's session storage. So that a person on our team reads every question, each chat (your messages, our replies, the page you were on and a random chat ID) is also saved in our private Cloudflare store for 30 days and emailed to our support inbox (orders@shopvoltvault.com) through AgentMail. Routine connection information (such as your IP address) is used briefly for rate limiting and is not stored with the chat. If you choose to leave your email in the chat, that email is saved with the transcript (kept longer, as a support request) so we can reply. We do not use chat messages for advertising.
- Payment QR codes are generated in your browser from our own site files; no third-party QR service is contacted.
- CoinGecko / Coinbase — pages that show live crypto estimates automatically request public exchange rates. That request exposes routine connection information, including your IP address and browser headers, but sends no name, email, shipping address, wallet address, cart contents or order details. Coinbase is used only if CoinGecko does not return a usable rate.
- AgentMail — the email service that sends your one order-confirmation email from our store mailbox. It receives your email address, order number, items, total, selected coin and our published wallet address; it does not receive your shipping address for that email. Once payment is confirmed on-chain it also delivers our private paid-order alert email, which carries the same order details as the Telegram alert below.
- Telegram — for crypto orders, receives a private order alert only once your payment is confirmed on-chain, not when you tap I've sent it. The alert contains your order reference, items, total, selected coin, the confirmed transaction hash, shipping name and address, contact email, an issued referral code if one applies, and an optional campaign-link label as described above. It is used to verify and fulfil the order and compare promotion channels, not to target you with advertising.
- Trustpilot — after the carrier shows your order as delivered, we give Trustpilot your name, email address and order number so it can send you one email, about two days later, inviting you to review your experience with us. There is no reminder, and whether you review is entirely up to you; we never offer anything for a review. Trustpilot uses those details for us only to send that invitation and to mark your review as verified if you write one, and keeps the invitation record for up to three years unless you ask us to delete it sooner (email orders@shopvoltvault.com). It is not used for advertising. See Trustpilot's privacy policy.
Those are the external services used by the storefront's normal page and order flows, plus Whop and Stripe for earlier card orders, including the Microsoft Advertising (UET) and Google Ads tags, Google Customer Reviews after paid checkout, and our own support chat (Cloudflare Workers AI; AgentMail only when you leave your email).
How long we keep it
Saved order records stay in our private Supabase order store, order alerts in our private Telegram order inbox, earlier card-order records reported by Stripe in our private Cloudflare store, and order-related support emails in our email inbox, so we can fulfil the order, honour the 30-day money-back guarantee and answer questions about a past order. Google ad click IDs saved with an order or an earlier card purchase expire after 90 days. The aggregate counts above follow our Umami account’s retention settings. We do not add them to your order or use them to identify you. Your order details are never sold or rented, and the only ad-related data is the Microsoft Advertising (UET) and Google Ads tags' measurement described above.
Your say
Page-view and button counts, and campaign-link labels, are omitted when the analytics script is blocked, you have opted out of Umami, or your browser signals Do Not Track or Global Privacy Control. To clear a campaign label just for this tab, clear this tab's campaign label. This does not clear your cart or delivery details. Clearing it does not remove a label from an order you already submitted; contact us for that.
Google Customer Reviews is a post-purchase survey choice, not advertising analytics. We offer it only after our system confirms payment. You may choose no in Google's prompt and your order is unaffected. Google may place or read cookies or use web beacons for the module; use your browser's cookie controls to inspect, block or clear them. See Google's privacy policy.
Email orders@shopvoltvault.com and ask what we hold on you, or ask us to delete it — we'll do it, subject to keeping what a completed order legally needs. If you'd rather not be counted at all, an ad or tracker blocker stops the Umami analytics script, the Microsoft Advertising (UET) tag and the Google Ads tag, and the site works exactly the same without them. To opt out of Microsoft ad personalization, use Microsoft's ad settings.