Privacy policy
Last updated: 28 September 2026
**Who we are**
PolyMaria (polymaria.net) is run by Robert Bush, Cyprus, who is responsible for your personal data. Contact: Telegram @abumarket_support (t.me/abumarket_support).
**What we collect**
- Account: your name, email address and a securely hashed password. If you sign in with Google, we receive your name, email address and Google account ID — never your Google password.
- Activity in your account: downloads, orders, wishlist, collections, reviews, product questions and support messages.
- Technical data: your IP address is used briefly to block abuse, such as too many sign-in attempts. It is not stored in your profile.
- Anonymous statistics: we count page visits, product views, downloads, searches and button clicks per day and per country (worked out from your IP address). No cookies are used for this and IP addresses are not stored; a visitor is counted once per day with a code that cannot be linked back to you. Country data: IP geolocation by DB-IP (db-ip.com).
- Your browser stores your language, theme, cart and wishlist, plus a sign-in cookie that keeps you logged in. We do not use advertising trackers or third-party analytics.
**Payments**
When paid checkout is available, payment is completed on the payment provider's own page (Binance Pay) or arranged with you on Telegram. We never see or store your card or wallet credentials.
**Why we use your data**
To run your account, deliver downloads and updates, answer support requests, prevent fraud and abuse, and meet legal obligations. The legal bases are performing our agreement with you, our legitimate interest in keeping the service secure, and legal obligations.
**Who we share it with**
We do not sell your data. We share it only with services needed to run the shop: our hosting provider (servers in Germany, EU), Google (only if you choose Google sign-in) and the payment provider (only for paid orders).
**How long we keep it**
Account data is kept while your account exists. Order records may be kept longer where accounting rules require it. Security data is kept only briefly.
**Your rights**
You can access, correct, export or delete your data. Use **Account → Privacy & data** to download a copy of your data or delete your account, or contact us on Telegram. You may also complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).
**Security**
Passwords are hashed, the site uses HTTPS only, and product files are stored privately.
**Changes**
If this policy changes, the date above is updated.