This Privacy Policy is the standalone version of the privacy commitments described in Section 9 and Section 9b of our Terms of Service. Both documents describe the same practices.
Order data is controlled by the operator of CustomTron. We use the following third-party services to operate the Service:
When you use the free tier (1–3 character patterns), generation occurs entirely in your browser via a Web Worker. No personal data, public key, pattern text, or generated address is sent to or stored on our servers. We record only anonymous, non-identifying metrics about the generation event — the time it took, whether the pattern was case-sensitive, and the pattern position (prefix or suffix). These metrics contain no pattern text, no address, and no IP (your IP is used momentarily for rate-limiting only and is never stored), and cannot be linked to you.
For paid-tier orders we collect minimal data necessary to process your order:
We also record the marketing source of your order (the referring URL and any campaign tags such as UTM parameters present when you arrived) and the country-level region of your request (a two-letter country code derived by our CDN from your IP; we never store your IP itself), solely to measure which channels and markets are effective. This contains no personal identifiers, is never linked to your government identity, and is deleted together with your order data after 90 days.
We do not collect names, government-issued identifiers, or physical postal addresses. We do not sell or share order data with third parties. Order data is retained for 90 days after completion, then deleted. If an order expires unpaid, we retain minimal order details (including contact email, if provided) for up to 90 days for follow-up and fraud-prevention purposes, after which they are deleted.
Aggregated technical data (IP address, browser type, device type, approximate geolocation) is processed by our analytics partners (see Section 4) for security, fraud prevention, and service improvement; this data is not linked by us to your wallet address or order ID.
With your consent, we use the following analytics services:
G-F13M60XHFV.wd0wyf3tgw.Both services receive your IP address (used by them for geolocation and fraud detection, then discarded or anonymized per their respective policies). Neither service receives your wallet address, public key, payment transaction ID, or any field marked as private input. On the order page, where your private key is handled, no analytics are loaded at all.
ct_consent key. The banner will reappear on your next visit.For details see Google's Privacy Policy and Microsoft's Privacy Statement.
Right to disable third-party services. We reserve the right, at our sole discretion and without prior notice, to disable, replace, or migrate away from any third-party analytics service at any time, including in response to a security incident, privacy violation, regulatory action, or change in vendor terms.
If you are a resident of the European Economic Area (EEA), the United Kingdom, China, or another jurisdiction with comparable data protection laws, you have the following rights:
To exercise any of these rights, contact us via Telegram @customtronbot or email [email protected]. We will respond within 30 days. We may require reasonable verification of your identity (e.g., proof of control of the order's payment-sending address or Telegram chat ID) before processing requests.
Free-tier note. Free-tier generation stores no personal data — only anonymous, non-identifying generation metrics (see Section 2). We therefore hold no personal data about free-tier users, and the requests in this Section apply only to paid-tier orders.
Data that is technically irretrievable cannot be erased by us — including aggregated analytics already anonymized by Google or Microsoft, and on-chain transaction records on the TRON network.
Operating jurisdiction. The Service is operated from outside the European Economic Area, the United Kingdom, and mainland China. Data subject requests under GDPR, the UK GDPR, or PIPL are handled per the procedures described in this Section.
Cross-border data transfer (PRC residents). Our servers and analytics partners are located outside the People's Republic of China. By using the paid tier from a PRC location, you give your separate consent under Article 38 of the Personal Information Protection Law (PIPL) to the cross-border processing of your order data outside the PRC for the purposes described in Section 3 above.