Privacy

We store account email, phone, address for orders, shop bank details (never shown on public shop cards), optional NIC for verification, and order history. Sessions use httpOnly cookies. Roles live in server profiles, not client metadata.

Receipt images are visible to the buyer, that shop, and admins. Admins must not dump NIC images.