Privacy Policy

Last updated: September 30, 2026

This Privacy Policy explains how T-Unlocks ("we", "us", "our") collects, uses, and protects the information you provide when you use our IMEI / iCloud unlock reseller platform (the "Service").

1. Information We Collect

We collect the information you provide directly to us, including:

• Account information: username, email address, and password (stored as a salted hash, never in plain text).
• Order information: device identifiers (IMEI / serial numbers) you submit for unlock or checking services.
• Payment information: transaction and invoice records related to credit purchases. Card details are handled directly by our payment processor - we do not store your full card number.
• Technical information: IP address, browser/device fingerprint, and session data, used for account security and fraud prevention.
• Security and contact settings you choose to add: passkeys, an authenticator app, a phone number or a Telegram connection.

2. How We Use Your Information

• To create and manage your account, and to authenticate you.
• To process and deliver the services you order.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To communicate with you about your orders, account, or support requests.
• To comply with legal obligations.

3. Data Security

We use industry-standard safeguards to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, bot/abuse protection via Cloudflare Turnstile, and session-based access controls. No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable measures.

4. Third-Party Services

We rely on trusted third parties to operate the Service, including Cloudflare (security and bot protection) and our payment processor (to handle top-up payments). These providers only receive the information necessary to perform their function and are bound by their own privacy and security obligations.

Some pages also load fonts and icons from Google Fonts and jsDelivr, and profile pictures from Gravatar, which receives a one-way hash of your email address rather than the address itself. As with any website, these services see your IP address when your browser loads their files.

5. Cookies

Cookies are small files your browser keeps for a website. We use as few as we can, and none of them are for advertising or tracking.

Essential cookies are always on, because the Service cannot work without them:

• Session cookie: keeps you signed in, protects your forms against forgery and secures your account. It is removed when you sign out or close your browser.
• Cloudflare security cookies: protect the site, including the sign-in page, from bots and abuse.
• shru_consent: remembers the cookie choice you made, for 6 months.

Preference cookies are kept only if you choose "Accept all":

• shru_theme: your theme (light, dark or black). With "Necessary only", it is kept only until you close your browser.
• shru_service_type: the filter you last used on the Place Order page, for 30 minutes.

We do not use analytics, advertising or social media tracking cookies. You can change your choice at any time, and you can also delete cookies in your browser's settings (deleting the session cookie signs you out).

Change cookie settings

6. Data Retention

We keep your account information while your account is open. Records of orders, payments and account transactions are kept for as long as the law and our accounting and fraud-prevention duties require, including after an account is closed (see Closing Your Account below). Emails we send you are kept for a limited time as delivery records.

7. Closing Your Account

You can ask us to close your account at any time from Account > Security > Close account. To protect your money and your orders, this is possible only when:

• your balance is exactly 0.00 (not above and not below zero);
• no order is pending, in process or under appeal, including Store orders, physical or digital;
• no top-up payment could still arrive (an unpaid invoice from the last 72 hours).

What happens next:

• If your account has never had an order or a payment, it is deleted at once, with everything in it.
• Otherwise you are signed out straight away and cannot sign in while our support team reviews the request. We check the conditions again, close the account and email you to confirm.

When an account is closed, we remove your sign-in details and personal information: username, email address, password, two-factor authentication, passkeys, API keys, Telegram connection, phone number, saved addresses and sign-in history. Records of past orders, invoices and account transactions are kept, no longer linked to your username or email address, because we need them for accounting, tax, fraud-prevention and legal purposes. Closing an account cannot be undone, but you are welcome to register again later with the same username and email address.

8. Your Rights

Depending on where you live, including the European Union and the United Kingdom under the GDPR, you may have the right to access the personal data we hold about you, correct data that is wrong, have your data deleted (see Closing Your Account), object to or restrict how we use it, receive it in a portable format, and withdraw your consent at any time, for example your cookie choice. To exercise these rights, contact us through the channels below. If you are in the EU or the UK, you may also complain to your local data protection authority.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact Us

If you have questions about this Privacy Policy, reach us through any of our published contact channels.