Privacy notice
Last updated: 14 October 2026
anyshop collects only what it needs to run the waitlist and seller accounts on anyshop.io, and to deliver what buyers purchase from the stores on it: your email, a hashed network fingerprint for security, what you add to your store, and what you buy. We do not sell data, show ads, or use analytics or tracking cookies.
Who we are
Anyshop LLC, 1603 Capitol Avenue, Suite 413, #4213, Cheyenne, WY 82001, United States, +1 940 237 8227, runs anyshop.io and decides how the data described here is used. For anything about your data, write to support@anyshop.io. A person reads every message, and we answer within one month.
This notice covers the anyshop.io website, the waitlist, seller accounts, and buying from a store on anyshop. Each store is run by an independent seller, who is responsible for their buyers' data; the section When you buy from a store on anyshop, below, explains what that means.
What we collect
We never store your IP address itself: where we need to recognise repeat requests, we keep a keyed hash of it that cannot be turned back into the address.
| Data | When we get it | Why | Legal basis | How long we keep it |
|---|---|---|---|---|
| Your email address | You join the waitlist | To invite you to the beta. That is the only email we send from the waitlist | Your consent, which you can withdraw at any time | Until you create an account or ask us to delete it, at most 24 months |
| Hashed network fingerprint | You join the waitlist or sign in | To stop automated sign-ups and password-guessing attacks | Our legitimate interest in keeping the service secure | At most 30 days, except in the security log below |
| Account details: email, sign-in sessions (device and browser type, hashed network fingerprint), passkey public keys, and your two-factor secret and backup codes, stored encrypted | You create a seller account | To let you sign in and to protect your account | Our contract with you | While your account is open. Sessions end when you sign out or after 7 days |
| Which version of the Terms of Service and the Acceptable Use Policy you agreed to, and when | You agree to them before your dashboard opens | To show what you agreed to, and to ask again when they change | Our contract with you | While your account is open |
| Store details: store name, category, and everything you add to your store, and your business details: legal name, address, country and phone, which checkout shows buyers as the seller | You set up and run a store | To run your store | Our contract with you | While your account is open, then deleted within 30 days of closing it, except records the law requires us to keep |
| Your Stripe connection, when a store connects Stripe: your Stripe account's ID, its country and default currency, whether it can take card payments, and the codes Stripe gives for what it still needs from you or why it is disabled. To create a Stripe account for you, we send Stripe your email address and your store's name and currency; Stripe collects your business, identity and bank details itself, and we never see them | You connect Stripe to take cards | To take card payments into your own Stripe account | Our contract with you; for the closing record, our legitimate interest in showing what we did | While your account is open. When it is deleted, we disconnect your Stripe account from anyshop where Stripe allows it, and keep its ID in our record of the closing for 25 months |
| Your PayPal connection, when a store connects PayPal: your PayPal app's client ID and secret, stored encrypted, your PayPal merchant ID and account email, and the references of the test payment that proves the connection works | You connect PayPal to take PayPal payments | To take PayPal payments into your own PayPal account | Our contract with you | While your account is open; the client ID and secret are deleted when you disconnect PayPal. Everything else is deleted within 30 days of closing your account |
| Your crypto wallets, when a store adds one: the wallet's extended public key, stored encrypted, its fingerprint, and the addresses we make from it for each payment. We never have your private keys | You add a Bitcoin or Litecoin wallet | To take Bitcoin and Litecoin payments straight into your own wallet, and to see each payment arrive | Our contract with you | While your account is open; the extended public key is deleted when you disconnect the wallet. Everything else is deleted within 30 days of closing your account |
| Identity checks, when a store takes payments other than Stripe or PayPal: the result of our check of your ID or business documents, the method, our staff note and who checked. The ID or business documents you upload, stored encrypted with our hosting provider (Vercel) until we have checked them | You upload your documents in your dashboard and we check them | To confirm who runs a store before it takes payments that no provider verifies | Our legitimate interest in keeping fraud off anyshop | The check's result: while your account is open, then deleted within 30 days of closing it. The documents: deleted once we have checked them, at most 30 days after you upload them, or sooner if you delete them |
| Security log: account actions such as sign-in changes and new API keys, with a hashed network fingerprint | You use the dashboard | To keep a record for security and for resolving disputes | Our legitimate interest | 24 months |
| Abuse reports: what you report about a store, and your email if you choose to give it | You use Report this store | To investigate and act on the report, and to reply to you. The seller never sees it | Our legitimate interest in keeping stores safe | The report: 24 months after we close it. Your email: deleted when we close the report; only a keyed hash of it stays, to spot repeated reports |
| Server logs: technical details of each request | Every visit | To run the site and fix problems | Our legitimate interest | Up to 30 days, at our hosting provider |
We do not sell your data, share it for advertising, or combine it with data from other sources. anyshop is for businesses and adults, and we do not knowingly collect data from anyone under 16.
Who helps us
Four providers process data on our behalf, under written agreements that let them use it only to provide their service to us.
| Provider | What they do for us | Where the data is |
|---|---|---|
| Vercel Inc. | Hosts the website and runs our servers | Our servers run in Frankfurt, Germany. Requests pass through Vercel's global network. Vercel is based in the United States |
| Neon | Runs our database | Frankfurt, Germany |
| Postmark (AC PM LLC, part of ActiveCampaign) | Sends sign-in, waitlist and order emails | Sent from the United States: Postmark's servers are in a data centre near Chicago and at Amazon Web Services, and none are in the EU. Postmark is based in the United States |
| Resend | Sends the same emails, only when Postmark cannot | Sent from Ireland. Resend is based in the United States |
Payment providers that buyers pay through, such as Stripe and PayPal, are not on this list: each works for the seller, under its own privacy notice (see When you buy from a store on anyshop, below).
Anyshop LLC is a United States company. If you are in the EU or the UK, the GDPR or the UK GDPR still applies to how we handle your data. Our servers and database run in the EU, but our emails are sent from the United States: the address we write to and what the email says go to Postmark there, under its data processing agreement, which includes the EU's standard contractual clauses and the UK's addendum to them. Our fonts and scripts are served from anyshop.io itself, so visiting the site sends nothing to any other company.
Cookies
We only use cookies that the service cannot work without, so we do not ask for consent to them. There are no analytics, advertising or tracking cookies, and the waitlist page sets none at all.
| Cookie | What it does | How long it lasts |
|---|---|---|
| __Secure-anyshop.session_token | Keeps you signed in to your seller account | Until you sign out, at most 7 days |
| __Secure-anyshop.two_factor | Holds a sign-in while you enter your two-factor code | 10 minutes |
| __Secure-anyshop.better-auth-passkey | Holds a passkey sign-in while your device confirms it | 5 minutes |
| anyshop.store | Remembers which of your stores the dashboard shows | 1 year |
| __Secure-anyshop.known_device | Remembers for 90 days that this browser signed in to your seller account with a second factor (your account ID and the time, signed). Used only while a two-factor reset of your account is open, so others asking for sign-in links to your address cannot use up yours. | 90 days |
| __Secure-anyshop_order | Keeps your order open on the device where you opened its link | Up to 24 hours |
| __Secure-anyshop_orders | Keeps a Find my order list open | 15 minutes |
| __Secure-anyshop_download | Lets one download start after you choose it | 2 minutes |
When you buy from a store on anyshop
Each store is run by an independent seller, who is responsible for your data as the seller of what you buy. anyshop handles it on the seller's behalf to run the checkout and deliver your purchase, and uses it for nothing else.
| Data | Why | How long it is kept |
|---|---|---|
| Your email address | To send your purchase, receipt and order link | Paid orders: 3 years from the order date, or 30 days after the store closes if that is sooner. Checkouts that were never paid: 30 days. A checkout the buyer already sent a crypto payment for, to the seller's own wallet, is kept like a paid order: 3 years |
| What you bought, the keys and files delivered, and when you opened them | To deliver your purchase, let you find it again, and sort out problems | With the order |
| License keys and their device activations | So the software you bought can check its license, and its device limit keeps working | As long as the store exists (without the buyer's details after 3 years) |
| Country and device type | To spot fraud and to support the seller if a payment is disputed | With the order |
| Your IP address, stored encrypted | Only as evidence if a payment is disputed, when it goes to the payment provider with the seller's answer | 120 days, then deleted |
| Blocklist matches: if a seller or anyshop blocks an email, email domain, network or country after fraud or abuse, we keep a keyed hash of it, never the email or IP address itself | To stop fraud and abuse at checkout, including across stores when anyshop confirms fraud | Until the block is removed |
| Once-per-email coupons: if you used a coupon a store allows once per email, a keyed hash of your email (never the address itself) | So the same email cannot use that coupon again | As long as the coupon exists |
| Order messages to the seller's own systems (webhooks): your email and what you bought | Only when the seller connects their own server, so it can deliver or record your purchase | Our copy: 30 days, so a failed send can be retried, then deleted |
| Details a seller brings from another platform: your email, name, licenses and devices, and marketing consent with its date | So the seller can keep serving you after moving their store to anyshop. Only a consent you already gave comes over; an import never subscribes you | Until the seller deletes it, or 30 days after the store closes |
Your payment details go to the payment provider you choose, such as Stripe (cards, Apple Pay, Google Pay and Link, when a store connects Stripe), PayPal or the seller's own crypto wallet, under that provider's privacy notice; anyshop never sees your card or account details. When you pay by card, you type your card details into Stripe's own form on the checkout page, and the payment is made in the seller's own Stripe account. That form loads from Stripe, which may learn about your device and connection from it to prevent fraud, under Stripe's privacy notice; we send Stripe only the order's amount and currency, a short description of what you bought and our references for the store, the order and the payment, never your email or IP address. If you pay with crypto and have not paid within 10 minutes, we email you a link to your payment page once, so you can pay from another device. Opening the link to your order sets a cookie that keeps your order open on that device, listed under Cookies above. Data that is deleted can remain in our encrypted backups for up to 30 days.
To use your rights over an order, contact the seller through the link on your order page, or write to support@anyshop.io and we pass your request to the seller within 5 working days.
Your rights
Email support@anyshop.io from the address you used with us, and we will act within one month, free of charge. You can ask us to:
- show you the data we hold about you, and give you a copy in a portable format
- correct anything that is wrong
- delete your data, including removing you from the waitlist
- stop or limit how we use it, or object to a use based on our legitimate interest
- withdraw your consent, which does not affect what we did before you withdrew it
If you are unhappy with how we handled your data, you can complain to the data protection authority in the country where you live or work.
Changes to this notice
When we change how we use data, we update this page and the date at the top. If you are on the waitlist or have an account, we email you before a change that affects you takes effect.