Information we use
We store your email address, unique username, display name, password hash, account security settings, orders, GiftMint Credit ledger, and support history so we can run the service. Optional profile pictures and banners are stored only when you upload them.
Information we do not want
GiftMint does not ask for or store your Epic Games password, Epic authentication codes, or payment card numbers. Payment details are handled by the payment provider. We only need the Epic display name required for a manual gift.
Email and payments
We use Resend to send account verification, sign-in security, and password-reset email. When enabled, a payment provider such as Skrill processes payment on its own secure systems. Provider credentials are kept on the server and are never sent to your browser.
Security and deletion
Passwords are hashed, sessions use httpOnly cookies, sensitive two-factor secrets are encrypted, and security-sensitive actions are rate limited and audited. You can disable your account or schedule deletion from Account settings. Scheduled deletion disables the account immediately and permanently removes associated customer data after 30 days, subject to records we must keep for fraud, accounting, or legal reasons.
Questions
For privacy questions or a data request, use the support email listed in the GiftMint account or site settings and include the email on your account.