Privacy policy

Last updated: 4 November 2026. This explains what SmmDost stores, why, and for how long.

What we store

• Account: your email address and a hashed password (we can't read it). Optional Telegram username if you add one.
• Orders: the public links you submit, quantities, prices, status and timestamps.
• Payments: amounts, status, and the transaction reference from our UPI payment partner. We never see your UPI PIN or bank login.
• Fraud prevention: the IP address and browser type used at signup and for payments.
• Visit data: the first page you landed on, the referring website and campaign tags (for example utm_source), stored in a first-party cookie and linked to your account at signup. We use this to understand which pages help people, not for advertising.
• Support: tickets and contact messages you send.

What we never collect

Passwords, OTPs or login sessions for Instagram, YouTube, Facebook, Telegram or any other platform.

Cookies

We use essential cookies for login sessions and payments, and first-party cookies for visit attribution. If analytics are enabled, a privacy-friendly analytics script may also be loaded.

Sharing

We share order links with our delivery systems to fulfil orders, and payment amounts with our UPI payment partner. We don't sell or rent personal data.

Retention

Account, order and payment records are kept while your account is active and as required for accounting. Server logs are kept for 60 days. Page-view records are deleted after 60 days.

Your choices

You can change your email or Telegram username in Account settings, or ask us to delete your account by writing to contact.smmdost@gmail.com. Wallet balances are forfeited on deletion.