Privacy Policy
Last updated 22 June 2026
This policy explains what we collect when you use NFA, why, and who we share it with. We keep data collection to what an order and basic fraud protection actually need.
What we collect
- Order details: the items, amounts, and payment status for each order.
- Email: only if you provide one, so you can find your orders again. Orders work without an account.
- Network data: your IP address and country, used to screen for fraud and to enforce blocks. We log the type of match, never your email or IP, when a block triggers.
- Support messages: anything you send us on Discord.
We never see or store full card numbers. Card details go straight to Stripe.
Services we use
We rely on a small set of providers to run the store. Each only receives what it needs to do its job:
- Stripe for card payments.
- OxaPay for crypto payments.
- Cloudflare Turnstile to tell humans from bots at checkout.
- Discord for community roles and support.
- Clerk for optional account login, if you choose to sign in.
How long we keep it
Order records are short-lived. Unpaid orders expire within about a day, and delivered orders are removed automatically not long after delivery. If you give an email, it stays linked to your recent orders for a limited period so you can look them up, then it ages out.
Your choices
You can ask what we hold about an order, or ask us to delete it, through our Discord. Because most orders are anonymous and short-lived, there is often little to nothing tied to you in the first place.
We do not sell your data.
Contact
Questions about privacy? Reach us on our Discord.