Privacy — demonstration

The application stores your email, display name, password hash, sessions, orders, and support messages in PostgreSQL. Session identifiers use an HTTP-only cookie. Passwords are hashed; sensitive delivery information is encrypted.

For an authorized live Spotify order, your submitted session is forwarded server-side to Upgrader to identify and upgrade your account. It is encrypted temporarily, cleared after the supplier request, and never included in logs, public links, or customer delivery data. The demo rejects real sessions.

The shopping bag is saved on your device. It does not establish your identity or payment status. Account and order records are held on the server.

No payment-card information is collected. External payment and supplier integrations remain disabled by default.

Before operating publicly, configure contact information, retention periods, data-deletion procedures, email delivery, and a privacy policy appropriate to the deployment. Avoid using personal information in the demonstration.