Privacy Policy

The controller responsible for your personal data is Viral Plugs, trading as SMM Supply. You can reach us at privacy@smm.supply for any privacy question or to exercise your rights.

Account data — email, hashed password, display name, role. Used to create and secure your account and provide the Service. Legal basis: performance of the contract with you.

Usage data — pages viewed, comparisons made, search terms, aggregated under an anonymous session ID. Used for analytics and product improvement. Legal basis: legitimate interests in operating and improving the Service.

Outbound click data — which panel link you clicked, for affiliate attribution and analytics. No PII attached. Legal basis: legitimate interests.

Support and communications — content of messages you send us. Legal basis: legitimate interests / performance of contract.

Security and fraud-prevention data — IP-derived signals, request metadata, abuse signals. Legal basis: legitimate interests in keeping the Service secure.

Paid products on SMM Supply are processed in cryptocurrency by NOWPayments. When you purchase, NOWPayments hosts the checkout, accepts the on-chain payment, and notifies us by signed webhook when the transaction settles. NOWPayments acts as an independent controller for any data it collects during checkout under its own privacy notice (https://nowpayments.io/privacy-policy). We receive only the invoice metadata needed to provision your purchase: order ID, paid amount, currency, transaction hash, and status. We do not receive or store wallet addresses, private keys, or banking information. Fiat invoicing is not available.

Strictly necessary cookies for sign-in. Analytics cookies are first-party and respect Do Not Track.

See the Cookie Policy for the full table.

Service providers and subprocessors acting under our instructions: hosting, database, email delivery, error monitoring, and customer-support tooling.

NOWPayments, for processing cryptocurrency payments on paid placements: invoice generation, settlement confirmation, and dispute handling.

Professional advisers (legal, accounting) where necessary.

Authorities when required by valid legal process.

We apply technical and organisational measures appropriate to the risk, including TLS in transit, encryption of sensitive secrets at rest, hashed passwords, role-based access controls, audit logging, and least-privilege access to production systems. No system is perfectly secure, but we work to keep your data protected.

You can access, correct, export, or delete your data at any time from Account → Privacy, or by emailing privacy@smm.supply. Where applicable law (e.g. UK/EU GDPR) gives you additional rights — restriction, objection, portability, withdrawing consent, lodging a complaint with your data protection authority — you can exercise them through the same channel.

Account data: until deletion. Usage logs: 90 days. Outbound click logs: 30 days. Payment invoice metadata (NOWPayments order ID, amount, transaction hash) is retained for 7 years to satisfy bookkeeping and tax obligations.

Privacy questions: privacy@smm.supply.