Privacy, in plain English.

Your account uses your email, username and a securely hashed password. AstraMarket uses session cookies to keep you signed in.

Accounts and orders

Account information, product records and order history are stored in the store’s Supabase-backed database. Better Auth manages passwords and sessions. Only authorized administrators can manage products and view store order information.

Crypto payments

Checkout never asks for a wallet seed phrase or private key. Payment verification may use the public transaction reference, receiving address, currency and network. Blockchain transactions are public and may be visible to anyone on the relevant network.

Images and website services

Product images are stored in Supabase Storage. Website fonts are loaded from Google Fonts. These services receive the network information needed to serve their content.

Human verification and abuse prevention

Cloudflare Turnstile checks requests for automated activity. A signed, HTTP-only cookie remembers marketplace verification for one hour. Cloudflare receives the network information needed to perform its checks. Short-lived request limits use hashed identifiers rather than storing raw IP addresses in the application database.

Reviews and recent purchases

Only buyers with confirmed payments can leave a review, once per product. Reviews are public and show a masked username. Recent purchase sharing is optional at checkout. When you opt in and country-level information is available through a trusted Cloudflare connection, your masked username, country, product and confirmation time can appear publicly for up to 24 hours. You can hide a shared purchase from its order page. Country estimates may reflect a VPN and do not identify your precise location.

Private tickets and delivery

Confirmed purchases open a private delivery ticket. Ticket messages are stored in the database and visible to the customer and authorized store administrators. Administrators can also create support tickets using your username and email. In-app notifications tell you about replies, deliveries and ticket status changes. Closing a ticket preserves its messages; it does not delete them. Notifications do not include delivery contents.

Your session

Use the account menu to log out. Clearing your browser’s site data removes local cookies but does not delete your account or order history.