tawfeer.funPick a suggestion to open its product.
Last updated 17 October 2026
tawfeer.fun runs this shop. To ask anything about your data, write to contact@tawfeer.fun.
For your account we keep your email address, the username you chose, the mobile phone number you gave us and when you confirmed it. We also keep your password, your account’s status and when you created it. Your password is stored only as an argon2id hash, never as you typed it.
If you choose light or dark while signed in, we also keep that choice on your account.
The links we send to confirm your email address or reset your password are stored only as hashes too. The codes that link the Telegram bot are stored the same way.
Codes that confirm a phone number are made and checked by Prelude, and we never store them. For each code we ask Prelude to send, we keep a record. It shows your account, the number and its country. It also shows the IP address the request came from, whether the code was sent, and when. We keep these records for 90 days to stop abuse.
We record your country once, the first time we see it at sign-up or at your first checkout.
Each time you sign in, we keep a session. It holds the IP address you came from and your browser’s description of itself, called its user agent. We keep the session so that it can be ended.
For each order we keep the email address you had when you placed it. We also keep the IP address and country it came from, the items, the amounts and the payment references.
The items delivered to you are stored encrypted.
We work out your country from your IP address to show prices in your currency and to record it on your orders. We look it up in a MaxMind GeoLite database kept on our own server, or read the country Cloudflare adds to your request. Your address is never sent to MaxMind.
If you link the shop’s Telegram bot to your account, we keep your Telegram user ID. If you share your phone number with the bot, we keep it on your account as your confirmed number. We keep it in place of the one you typed at sign-up. Purchases with Telegram Stars happen in the bot, and we keep them like any other order.
If you apply to sell, we keep your shop name and what you sell. We also keep your contact handle, your country, your links, and your payout method and address. Once you sell, we keep your balances and your withdrawals.
Before we approve you as a seller, Didit, our verification partner, checks your identity on its own page. You take a photo of a government ID and a selfie, and Didit compares your face with the photo on the ID. Didit keeps the photos and the selfie for us, and we never receive them. For each check we keep its result, its dates, Didit’s number for it, and the reason Didit gives when a check doesn’t pass. When a check passes, we also keep your legal name, date of birth and nationality. We keep the type of document, the country that issued it and its expiry date as well. We keep all of these details encrypted. We keep these while your application is open and while you sell here. We delete the reason and those details when we turn down your application, when you stop selling, or when you ask us at contact@tawfeer.fun. We also ask Didit to delete its copy of your checks. We keep only a record that each check took place. The record has its result, its dates, Didit’s number for it and any note we wrote asking you to verify again. Didit keeps what its fraud protection needs, such as its block list and the data that spots the same person verifying twice. Our encrypted backups can hold a copy for up to 12 months more.
The site’s logs include IP addresses. The server keeps only its newest log files, up to 50 MB for each part of the site. It deletes the oldest as new lines arrive. When the shop runs its log search tool, that tool keeps logs for 30 days.
Encrypted backups are kept away from the server for up to 12 months. The copies are 7 daily, 4 weekly and 12 monthly.
We keep a log of actions on accounts and orders, for example a sign-up with its email address, IP address and country. Phone numbers in that log show only their country code and last two digits. The site itself can’t change or delete that log. The log notes each identity check and each time the shop owner views its details, never the details themselves.
Each order keeps the email address you had when you placed it, and it never changes.
Write to contact@tawfeer.fun to see or correct your data. You can close your account yourself from your account page, or write to us to close it. Past orders and the action log are kept. We delete a sign-up that is never confirmed after 30 days.
The date at the top of this page changes whenever this policy changes.
This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com