Version 2026-09-25

Privacy Policy

What we collect, why, who else sees it and for how long. Short version: an email, what you ordered, and how you paid. No social passwords, no card numbers, no advertising trackers.

In effect since September 25, 2026. HypeDock operates the SMM panel at hypedocksmm.com. Registered operator details are available on request at [email protected].

1. What we collect

Your account: name, email address and a password we store only as a hash, never in a readable form.
Your orders: the link you submit, the quantity, the service, the price charged and the delivery status. The link is usually a public profile or post.
Your payments: the asset and network, the amount, the transaction hash, the deposit address we gave you, and the processor's own reference when you pay through the hosted page.
Technical records: IP address, user agent and request logs, which exist so we can investigate abuse and failures.
Support: the messages you send us and our replies.

2. What we never collect

Passwords to your social accounts. The panel has nowhere to type one, because an order only needs a public link.
Card numbers. We never see them; payments arrive as crypto, and where a processor accepts other methods it handles those details, not us.
Advertising or analytics trackers. There are none on this site.

3. Why we hold it

To run the service you asked for: your account, your orders, your balance. This is the contract between us.
To keep the panel and its money safe: fraud prevention, abuse investigation, and defending disputed payments. This is our legitimate interest, and yours.
To keep books that add up: accounting records of money in and out.

We do not sell your data, and we do not use it to profile you for advertising.

4. Who else sees it

The provider that fills your order receives the service, the link and the quantity — and nothing that identifies you. It never learns your name, your email or what else you bought.
Our payment processor sees a deposit reference and the amount when you pay through the hosted payment page, so it can tell us the payment arrived.
Cloudflare sits in front of the site as network and security layer, handles the sign-up challenge, and routes email sent to our addresses.
Our email provider receives your address and the content of the messages we send you, such as a verification code or a notice about an order.
Our hosting provider runs the server the panel lives on.
Authorities, where the law obliges us and to the extent it obliges us.

These providers operate in several countries, so your data may be processed outside the one you live in.

5. How long we keep it

Technical request logs: 30 days, then deleted automatically.
Account, orders and payment records: while your account exists, and afterwards for as long as accounting and anti-fraud obligations require.
Support conversations: while they are useful to answer a later question about the same order.

6. Your rights

Write to [email protected] from the address on your account and you can ask us to: give you a copy of your data, correct it, delete it, or stop a particular use of it. We answer within 30 days.

Deletion has one limit worth stating plainly: records of money — deposits, orders, ledger entries — are kept for as long as accounting rules require, even after an account closes. Everything else goes.

If you think we handled your data badly, you can complain to the data protection authority where you live.

7. How it is protected

The site is served only over HTTPS, and the server publishes no ports to the internet: traffic reaches it through an outbound tunnel, so there is no open door to knock on.
Passwords are hashed. Staff accounts require two-factor authentication.
No key that can move funds lives on the server. Payouts to providers are made by a person.
Your session lives in a cookie that page scripts cannot read.

No system is perfect. If we ever suffer a breach that affects you, we will tell you and the relevant authority.