We collect minimal data. Session data is stored for authentication only. IP addresses are hashed for rate-limiting purposes and are not stored in plaintext beyond 30 days. Transaction IDs are stored indefinitely for payment verification. We do not share data with third parties.