Privacy Policy

1. Who is responsible

The operator of bannermenu.com is responsible for the personal information described in this policy. Privacy questions and rights requests may be sent to support@bannermenu.com.

2. Information we process

• Account data, including your name, email address, password hash, account role, and authentication session information.
• Technical and security data, including IP address, user agent, request and proxy logs, authentication events, and timestamps.
• Order data, including edition, euro price, BTC quote, unique payment address, amounts, status, timestamps, and public blockchain transaction identifiers.
• License data, including edition, status, a one-way hash and short hint of the issued key, issuance time, verification time, application version, and related audit records.
• Messages and information you provide when requesting support or a refund.

We do not need and will never ask for your Bitcoin wallet seed phrase, private key, or wallet password. The full BannerMenu license key is shown when issued but is not stored in recoverable form in the database.

3. Why we use information

We use this information to:

• create accounts, authenticate sessions, and provide the purchased product;
• create invoices, detect and reconcile payments, and prevent duplicate fulfilment;
• issue and verify licenses, provide downloads, and respond to support requests;
• protect customers and the service from fraud, abuse, and security incidents;
• maintain accounting, audit, backup, and legal records; and
• diagnose faults and improve reliability.

Where a legal basis is required, processing is based on performing our contract with you, meeting legal obligations, protecting legitimate interests such as service security and fraud prevention, or your consent where specifically requested.

4. Cookies and analytics

The site uses essential authentication cookies to keep you signed in and protect account actions. We do not currently use advertising cookies or third-party audience analytics. Blocking essential cookies may prevent account, checkout, and download features from working.

Module demonstrations use YouTube's privacy-enhanced embed domain. Google may receive technical request data such as your IP address and browser information when the player loads, and YouTube may store data or cookies when you interact with or play a video. We do not use these embeds for audience analytics.

5. Bitcoin and public blockchain data

Bitcoin transactions are public and may remain visible permanently. To detect payment, our server queries Blockstream's public Esplora service using the unique address for an order. Blockstream can therefore receive that address and technical request data such as the server IP address. It does not receive your BannerMenu account credentials from us.

Our server obtains a public BTC/EUR ticker from Kraken. That request is not sent with your account or order identifier. Wallets and exchanges you choose to use process information under their own policies.

6. Sharing and service providers

We share information only when needed to operate the service, comply with law, protect rights and security, or complete a business transfer. Providers can include hosting and infrastructure vendors, Blockstream for blockchain lookups, Kraken for market data, and YouTube/Google for privacy-enhanced video embeds. We do not sell personal information or share it for cross-context behavioural advertising.

7. Retention

Account and active-license records are generally kept while the account or license is in use. Order, payment, accounting, security, and audit records are kept for the period needed to handle disputes, prevent fraud, maintain backups, and meet legal obligations. Expired sessions and temporary verification records are removed or expire according to their configured lifetimes. Public blockchain records are outside our control and cannot be deleted by us.

8. International processing

Infrastructure and public API providers may process technical data in countries other than yours. Where applicable law requires transfer safeguards, we will use an available lawful mechanism or choose an appropriate provider configuration.

9. Security

We use measures such as HTTPS, restricted production access, one-way password and license key storage, isolated services, backups, and access logging. No system is perfectly secure, so keep your password and license key private and contact us if you suspect compromise.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, object to certain processing, withdraw consent, or complain to a data-protection authority. These rights can be subject to legal exceptions and record-retention duties. Contact us from the account email so we can verify the request.

11. Children

BannerMenu is not directed to children who cannot legally consent to use an online service in their jurisdiction. If you believe a child provided personal information improperly, contact us so we can review and delete it where required.

12. Changes and contact

We may update this policy when the product, providers, or legal requirements change. The updated date will appear above. Contact support@bannermenu.com with privacy questions or requests, and never include wallet secrets or passwords.