Privacy Policy
How StanBaza collects, uses, and protects your data.
1. Controller
AAAgency operator of stanbaza.com, is the data controller for personal data processed through the Service. Contact: team@aaagency.dev.
2. Data we collect
- Account data: your email address and a securely hashed password (we never store passwords in plain text); your authentication method (local or Google).
- Google Sign‑In data (if used): your email address, its verification status, and your Google account identifier.
- Usage and personalisation: saved filters, favourites, hidden items, notes, viewed status, and preferences (language, currency, theme), and notification settings.
- Telegram data (optional): if you connect Telegram alerts, your Telegram chat identifier and username.
- Technical data: IP address, browser/device information, and server logs, for security, abuse prevention, and reliability.
- Payment data: when you pay, you make a cryptocurrency transfer (USDT, TRC‑20). We process the on‑chain transaction amount and reference to confirm payment; we do not collect card or bank details.
3. How and why we use data (legal bases)
- To provide the Service, your account, and paid access — performance of a contract.
- To secure the Service and prevent fraud and abuse — legitimate interests.
- To send transactional messages (verification, account, payment confirmations) — contract / legitimate interests.
- To send optional Telegram alerts and to set any non‑essential cookies — your consent, withdrawable at any time.
- To meet legal, tax, and accounting obligations — legal obligation.
4. Payments
Payments are made in cryptocurrency (USDT, on the TRC‑20 network). We process the on‑chain transaction amount and reference solely to confirm your payment and activate access. We do not collect or store card numbers or bank details.
5. Sharing and processors
We do not sell your personal data. We share it only where necessary with: Google (Sign‑In, if used, and transactional email delivery); Telegram (notifications you opt into); hosting and infrastructure providers (operation of servers and encrypted backups); and blockchain data providers (verification of cryptocurrency payments). We may also disclose data where required by law or to protect our rights.
6. International transfers
Some providers may process data outside your country. Where required, such transfers are protected by appropriate safeguards (e.g., Standard Contractual Clauses or an adequacy decision).
7. Retention
We keep account and personalisation data while your account is active. Inactive accounts (no active access and no login for an extended period, currently 180 days) may be deleted together with their personalisation data. Payment and transaction records are retained as required by tax and accounting law. You may request deletion at any time.
8. Your rights
Subject to applicable law (including the GDPR), you have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, contact team@aaagency.dev. You may also lodge a complaint with your competent data‑protection supervisory authority.
9. Cookies
StanBaza uses a minimal set of cookies: strictly necessary cookies for signing you in (session cookie) and CSRF protection; and preference storage for your language, currency, and theme. We do not use third‑party advertising or cross‑site tracking cookies. You can control cookies in your browser, but disabling strictly necessary cookies will prevent sign‑in and core features.
10. Security
We use HTTPS, hashed passwords, signed sessions, CSRF protection, encrypted backups, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Children
The Service is not directed to persons under 18, and we do not knowingly collect their data.
12. Changes and contact
We may update this Policy from time to time; the date below reflects the current version. Contact: AAAgency · team@aaagency.dev.
Last updated: 21 July 2026