The public pages of this site are static. No analytics, no advertising cookies and no third-party trackers are loaded. Nothing about your visit is recorded beyond standard server logs.

When you place an order we store the name and contact you provide, the plan selected, any notes you write, the transaction reference you submit, and — if you upload one — a screenshot of your payment. We store this to fulfil the order and to keep a record of the transaction.

We never see or store your card or banking credentials. Payment is made directly to us through a payment app or bank transfer; those credentials are never transmitted to or held by this site.

Order records are retained for as long as needed to deliver the order and to meet accounting and tax obligations. Payment screenshots are pruned after 90 days. Server logs are rotated automatically and not retained long-term.

Nobody, except where we are legally required to disclose it, or where sharing is necessary to deliver the service — for example our upstream infrastructure provider, who operates the hardware your server runs on and is bound by their own obligations. We do not sell data.

No data brokerage. No advertising profiles. No cross-site tracking. No selling or renting of customer lists.

The site is served over HTTPS. Administrative access requires a password and is restricted to a single authenticated session. Uploaded screenshots are stored outside the public web root and served only to an authenticated administrator. No system is perfectly secure, but we will not be careless with what we hold.

You may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted where we are not legally required to keep it. Email venom@tomatofist.com and we will respond.