NFA Dealer privacy policy
Updated
Version of 27 September 2026.
This policy explains what data the NFA Dealer shop (the "Shop", "we") collects on nfadealer.top, why it is needed, who it is shared with and how long it is kept. We collect only what we cannot sell an account, deliver it, honour the warranty and protect the shop from fraud without.
Who processes the data
The data controller is the NFA Dealer shop, nfadealer.top. You can reach us about data processing at support@nfadealer.top. This policy covers the shop's website and the emails the shop sends to buyers.
What data we collect
Order data. Your email address, the product, tariff and quantity you chose, the amount and display currency, the payment method, the site language, the order status and event times, and the delivered accounts' details with their checks and replacements.
Technical data at checkout and order lookup. Your IP address and browser details (user agent). We need them to limit how many orders and requests come from one address and to detect abuse.
Payment data. From Crypto Bot we receive the invoice identifier, amount, currency and payment status. Your crypto wallets and your Telegram account details are not passed to the Shop, apart from what Crypto Bot reports about the payment itself.
Account supplier data. To deliver an account, the Shop requests it from a supplier and receives the Steam login, the account's details (hours played, profile) and the loader file. The Shop sends the supplier only the account type and a service delivery code: your email, IP address and other data are never passed to it. The loader signs in to Steam on your computer, and the Shop receives no data from it.
Support requests. The contents of emails you send to support and our replies.
Data stored in your browser. Your chosen theme, the site language and the email you entered at checkout, so you do not have to type it again. This data stays on your device, and you can clear it in your browser settings.
We do not collect passwords, bank card details, identity documents or anything about your own Steam account.
Why we use the data
To place orders, take payment and deliver accounts.
To send service emails: the order link, the delivered accounts' details and support replies.
To honour the warranty: check accounts at your request and deliver replacements.
To protect the shop and buyers from bots and fraud.
To keep sales records and meet legal requirements.
To understand how visitors use the site and improve it — when web analytics is enabled.
We do not sell personal data and do not use it for marketing emails without your separate consent.
Legal bases
Order, payment and delivered account data are processed to perform our contract with you — without them the order cannot be fulfilled. Technical and anti-abuse data are processed on the basis of the Shop's legitimate interest in keeping the service secure. Web analytics data is processed with your consent, which you can withdraw by blocking the relevant cookies in your browser.
Who we share data with
We share data only with services the shop cannot work without, and only as much as they need:
Crypto Bot
What it receives
Invoice amount and description
Why
Taking payment
Account supplier
What it receives
The account type and a service delivery code
Why
Delivering and checking accounts
Cloudflare Turnstile
What it receives
Technical browser data
Why
Protecting forms from bots
Email provider
What it receives
Email address and message text
Why
Delivering service emails
Yandex Metrica
What it receives
Anonymised visit data
Why
Web analytics, when enabled
Data may also be disclosed at the lawful request of public authorities, within the limits set by law.
The servers of these services may be located in different countries. When sharing data we choose services that protect it and pass on only what a given task requires.
Automated restrictions
Some decisions on the site are made automatically: the bot check at checkout, limits on the number of orders and requests per address and per email, and how often an account can be checked on the order page. These measures protect buyers from fraud and keep bots from buying up accounts. If you believe a restriction was applied to you by mistake, contact support and a person will review your request.
Emails
We send only service emails: the order page link, the delivered accounts' details, order lookup emails and support replies. You cannot opt out of service emails because the order cannot be fulfilled without them, but we never send marketing without your consent.
Cookies and browser storage
The site uses cookies to remember your language, to run the bot protection and, when enabled, for web analytics. Your theme setting and your checkout email are kept in the browser's local storage. You can delete cookies and site data in your browser settings; the site keeps working, but you will need to pick your language and theme again.
How long we keep data
Order, payment, delivered account, check and replacement data are kept for as long as needed to fulfil the order, honour the warranty, settle disputes and keep records, and no longer than the law requires. Technical logs and anti-abuse data are kept for a limited time and deleted once they are no longer needed. Support correspondence is kept while it is needed to resolve your question and any dispute about it.
How we protect data
Order links contain a random token, and our database stores only its hash, so a link to your order cannot be recovered from the database. Only staff who need it for their work can access order data, the connection to the site is protected by HTTPS, and payment details are processed on Crypto Bot's side. Account details are shown only on the order page and in the email to the order's address, and loader files are stored on the Shop's server and download only through the order link.
Your rights
You may ask what data we hold about you, have inaccurate data corrected, have data deleted that is no longer needed to fulfil an order or meet the law, or restrict its processing. Email support@nfadealer.top from the address you ordered with. Before acting on a request we may ask you to confirm that the email is yours. We reply within 30 days. Data needed for sales records and legal compliance is kept until the required period ends, even after a deletion request.
Children
The shop is not intended for minors acting without the consent of a legal guardian and does not knowingly collect their data. If you believe a child has given us their data, contact support and we will delete it.
Changes to this policy
We may update this policy. A new version is published on this page with its effective date. If the changes are significant, we say so at the top of the document.
Contact
For any question about personal data, email support@nfadealer.top. The conditions of purchase are set out in the terms of service.