Policy
Privacy Policy
This policy explains what personal data RerollAccount collects when you visit rerollaccount.com or buy from us, why we use it, who we share it with, and the choices you have.
Last updated: 27 October 2026
1. Who we are
RerollAccount runs rerollaccount.com, the official website of RerollAccount, and is based in Singapore. RerollAccount decides how your data is used. For any question or request about your data, email help@rerollaccount.com with “Privacy” in the subject line. That address also reaches the person responsible for data protection.
The store is for adults: you must be 18 or older to buy from us. We do not knowingly collect data from children under 13. If you think a child has sent us personal data, email us and we will delete it.
2. What we collect
What you give us
- Order details: your name, email, billing address and country, the products you buy, and anything you add to the order, such as your game server, game ID or, for boosting orders, your game login.
- Messages: emails and chat messages to support, and the files you attach.
- Proof of purchase: when we ask you to confirm a payment, the screenshot you send. Please cover anything we did not ask for, such as a full card number or your balance.
- Store account: if you create one, your email, your password (stored only in scrambled form) and your order history.
What we receive from payment providers
Stripe (through WooPayments) and PayPal process your payment. We never see or store your full card number. We receive the payment result, the card brand, its last four digits and expiry, the country it was issued in, the results of the card’s security checks and the provider’s fraud rating.
What is collected automatically
Your IP address, browser and device type, your approximate location from the IP address, the pages you visit and how you use them (clicks, scrolling and mouse movement), and the page or ad that brought you to the store. Section 6 covers cookies.
3. How we use your data
| Purpose | Legal basis (Europe and UK) |
|---|---|
| Process and deliver your order, and support you afterwards | Performing our contract with you |
| Prevent fraud: check orders against card checks, the payment provider’s rating, earlier payment disputes and repeated failed payments, and ask some buyers for proof of purchase before delivery | Our legitimate interest in protecting buyers, the store and our payment partners |
| Answer chargebacks and payment disputes by sending the bank or payment provider the order record, the delivery email, our messages with you and any proof of purchase | Our legitimate interest in defending legal claims |
| Keep tax and accounting records | Legal obligation |
| Understand how visitors use the site, including recordings and heatmaps of visits, so we can improve it | Our legitimate interest in running and improving the store |
| Show our ads on other sites and apps, and measure which ads lead to orders | Our legitimate interest in advertising the store, with the ad settings in section 7 |
| Send offers by email | Your consent, or as a past customer for similar products where the law allows. Every email has an unsubscribe link |
| Ask for a review after an order | Our legitimate interest. You can opt out from the email |
4. Automated checks
Some checks run by software. Our payment providers and our checkout can block a payment automatically, for example when the card’s address check fails, when your connection’s country differs from your billing country, or when your email or connection is linked to an earlier payment dispute. When we ask for proof of purchase, an AI service (Google Gemini) reads your screenshot and compares it with your order. It can approve a clear match; it never refuses an order on its own, and anything it cannot confirm goes to a member of our team. If an automated check affected you, email us and a person will review it.
5. Who we share your data with
We do not sell your personal data for money. We share it with the services that help us run the store, and only as far as each one needs:
- Payments: Stripe (through WooPayments) and PayPal.
- Hosting and security: Rocket.net and Cloudflare. Cloudflare also tells us your country so we can show prices in your currency.
- Email and support: Google Workspace (our email and help inbox), 3CX (live chat), and Google Gemini (reading proof-of-purchase screenshots, under Google’s paid terms, which do not let Google use the content to improve its products).
- Staff tools: a private Telegram group where our team reviews orders that need a person, and the order chat for boosting orders. Contact details are filtered out of boosting chats.
- Boosting: for boosting orders, the person who carries out the service sees your game login and the order chat. Your login is stored encrypted and shown to them once.
- Reviews: Trustpilot and Google Customer Reviews receive your name or email and order number to send a review invitation.
- Analytics: Google Analytics, Microsoft Clarity and WordPress.com statistics.
- Advertising: Google (Google Ads and Merchant Center) and Meta (Facebook and Instagram). We may add other advertising platforms; this list names every one we use.
- Payment disputes: banks, card networks and payment providers, when a payment is disputed.
- Authorities, when the law requires it, and a buyer of the business if the store is ever sold.
When you buy, we send Google and Meta your email address in hashed form (scrambled with SHA-256 before it leaves our server) so they can tell us whether one of our ads led to the order. They match it against their own users and do not receive your email in readable form from us.
Microsoft Clarity records the pages you view, where you click and scroll, and your device and browser. We review these recordings to find and fix pages that are hard to use. On checkout and payment pages, the pages shown after payment, and account and login pages, the page content is hidden in the recordings. Anything you type into a form is hidden on every page. Microsoft collects this data as an independent controller, meaning it decides why and how it uses the data. It may also use the data for its own purposes, including improving its products and building advertising profiles for services such as Microsoft Advertising. Microsoft’s privacy statement explains its data use and your choices: privacy.microsoft.com/en-us/privacystatement.
6. Cookies and similar technologies
Cookies and similar tools (pixels, local storage) store small pieces of data on your device.
| Type | What it does | Examples |
|---|---|---|
| Essential | Cart, checkout, currency, login and security. Always on | WooCommerce cart cookies, al_cur, Stripe and Cloudflare security cookies |
| Order source | Records which page or link brought you to the store, saved with your order | sbjs_*, wffn_* |
| Analytics | Counts visits and shows which pages work | Google Analytics _ga, _ga_*; Microsoft Clarity _clck, _clsk and Microsoft’s MUID; WordPress.com statistics |
| Advertising | Measures our ads and shows them to people likely to be interested | Google _gcl_au; Meta _fbp; similar cookies from other ad platforms we list in section 5 |
Analytics and advertising cookies are set when you open the site. You can block or delete cookies in your browser settings, and the ad settings in section 7 let you turn off personalised ads.
Google explains how it uses data from sites like ours at policies.google.com/technologies/partner-sites. Meta’s privacy policy is at facebook.com/privacy/policy.
7. Your choices about ads
- You can turn off personalised ads at myadcenter.google.com and in your Facebook or Instagram ad settings, or use the industry opt-outs at aboutads.info/choices and youronlinechoices.eu.
- For Microsoft, you can turn off personalised ads in your Microsoft account’s privacy settings.
8. Transfers outside your country
We are based in Singapore and our service providers are in the United States, Europe and elsewhere, so your data may be processed outside your country. Where European or UK law applies, these transfers rely on the European Commission’s standard contractual clauses (with the UK addendum) or the provider’s certification under the EU-US Data Privacy Framework.
9. How long we keep your data
- Orders, payments and invoices: at least 5 years, for tax and accounting.
- Copies of order emails (confirmations, deliveries, refunds): 12 months.
- Support messages, proof-of-purchase screenshots and records used to stop repeat fraud (an email or connection linked to a payment dispute): as long as we need them to deliver and support orders, handle payment disputes and prevent fraud.
- Store account: until you ask us to delete it, except the order records above.
- Email offers: until you unsubscribe.
- Analytics data: up to 14 months.
10. Your rights
Depending on where you live, you can ask to see the data we hold about you, correct it, delete it, receive a copy, limit how we use it, or object to our use of it, and you can withdraw consent at any time. Email us; we answer within one month and may ask you to confirm your identity. Some data has to stay for the reasons in section 9.
If you are unhappy with our answer, you can complain to your data protection authority: in the European Union, the authority in your country; in the UK, the Information Commissioner’s Office; in Singapore, the Personal Data Protection Commission.
11. Security
Our site uses encrypted connections. Access to order data is limited to staff who need it. Game logins for boosting orders and our stored copies of order emails are encrypted. Card details stay with our payment providers. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities where the law requires.
12. Changes to this policy
We will update the date at the top when we change this policy, and we will announce important changes on the site or by email.
13. Contact
RerollAccount, Singapore. Email help@rerollaccount.com with “Privacy” in the subject line.