Privacy Policy
This policy describes the data handled by the current website. Firebase Authentication manages sign-in; customer profile and order data is stored in Cloud Firestore. Game passwords are not requested.
We never request, store, or verify your game master account password or social login credentials.
The website does not currently connect to game-provider fulfillment services.
Signed-in users' short HASA member IDs, themes, favorites, saved Player IDs, and notification preferences are stored in Firestore. The Firebase UID remains the internal account key.
Firestore customer records and orders are associated with the signed-in Firebase UID.
Information We Collect
Depending on the features you use, the website stores:
- Account data: Firebase UID, short HASA member ID, email address, display name, theme, notification preferences, favorites, recent game activity, and saved Player IDs.
- Order data: Game, selected product, Player ID, server, catalog price snapshot, selected payment method, payment/order status, payment-proof filename and timestamp, and the authenticated customer's UID. Submitted proof images are stored privately in Firebase Storage and linked from the order record.
- Wallet deposit data: If eZ Cash deposits are configured, the submitted reference number, provider deposit ID, verification status, and credited amount.
- Authentication data: Firebase Authentication processes sign-in credentials. The website does not store passwords itself.
How We Use Information
Data is used to authenticate your account, save your preferences, create and display orders, and allow authorized administrators to review submitted eZ Cash payment proof:
- Account features: Displaying your profile and restoring your saved preferences and Player IDs across signed-in sessions.
- Order history: Showing the order records associated with your UID.
- Wallet deposits: Sending a submitted eZ Cash reference to the configured deposit provider for verification and recording its result.
- Service operation: Processing requests and displaying errors needed to operate the website.
Zero Password Storage & Player Safety
Your game account credentials are strictly your own. HASA GOLD STORE does not request game passwords. Player IDs entered for orders are stored with the order record and are not verified against game servers:
- Never ask for passwords: We will never ask for your game password, Google account, Facebook login, Apple ID, or secondary verification codes.
- No provider delivery: The website currently has no game-provider fulfillment integration.
- Phishing Warning: If anyone claiming to represent HASA GOLD STORE requests your game password, do not disclose it. A staffed support contact is not currently available on this website.
Security & Encryption Standards
Firebase Authentication and Firestore Security Rules provide the configured identity and data-access controls. No client-side admin management or payment-card handling is enabled.
- Transport security: Use the HTTPS website endpoint for traffic in transit. The deployment's host and Firebase apply their own security controls.
- Firestore rules: Customer documents are UID-scoped; clients cannot write orders, wallet credits, catalog data, or administrative records.
- Payment data: Card and bank checkout is not available. Do not enter payment credentials on this website.
Game Publishers & Third Parties
The website uses Firebase Authentication, Cloud Firestore, and private Firebase Storage for accounts, orders, and payment-proof images. The optional Free Fire name lookup sends the entered Player ID to Nexaura; no Player ID is sent to game publishers for top-up fulfillment:
- Game-provider integrations: not configured.
- Card and bank payment processors: not configured.
- Firebase Authentication and Firestore: account identity and UID-owned application data.
- Nexaura: eZ Cash deposit verification or optional Free Fire player-name lookup, when the relevant server integration is configured.
Firebase and Nexaura process data according to their own terms and privacy policies. Firebase may also process technical data needed to provide its services. No game account credentials are collected.
Your Rights & Contacting Us
Depending on applicable law, you may have rights regarding your personal information, including:
- Access & Correction: The dashboard shows your saved profile preferences, Player IDs, and order history. The website has no data-export tool.
- Deletion & Erasure: Account deletion is not self-service on this website. Order and financial records may be retained where required.
- Inquiries: The Support page currently contains FAQs only; a staffed privacy contact channel has not been configured.