Card numbers
Typed into Stripe's own form and sent straight to Stripe.
Never sent to Keyhalt, never stored here, never in an e-mail.
Your card goes to Stripe, not to us.
Keyhalt takes one payment and sends one key. It is built so that the most sensitive thing in the transaction — your card number — never passes through it at all.
The short version
What Stripe tells us
Whether the payment succeeded, the card brand and the last four digits.
Not the number, not the security code, not your bank.
What Keyhalt stores
The order: what was bought, what it cost, when, the reference, and the e-mail the key went to.
No password, because there is no account to have one.
The longer version
The card form belongs to Stripe
Stripe is a payment processor used by a large part of the internet, and it is the party that is allowed to hold card numbers. On the Keyhalt payment page the card fields are drawn by Stripe's own code inside its own frame. Keyhalt hands it an amount and a currency; it hands back a yes or a no. The number itself is never ours to lose.
The payment link expires, on purpose
A link is made for one order, lasts fifteen minutes, and can be paid once. That is short enough that a link left open in a tab, forwarded in a chat or restored by a browser cannot be paid a second time. If it runs out, nothing has been charged — go back to the store and start again.
Reloading the payment page does not spend the link. It is only spent when you press pay, so if a card is declined you can try another one against the same payment rather than opening a second one.
Nothing loads from anywhere else
The pages are served over HTTPS only, and the browser is told to refuse anything that is not. The typeface, the styles and the scripts come from this site; the single exception is Stripe's card form, which the payment page needs and nothing else uses. There are no advertising tags, no trackers and no third-party analytics on any page.
Cookies and what stays in your browser
Keyhalt sets no cookies of its own. The payment page keeps one value in your browser's session storage — the identifier of the payment you started — so that a declined card can be retried without opening a second one, and it is gone when you close the tab. Your choice of light or dark theme is stored in your browser and never sent anywhere. Stripe's form sets its own cookies, which it needs to detect fraud.
Who else is involved
Stripe, who take the payment and keep their own record of it under their own privacy policy. The e-mail provider that delivers your key. The hosting provider that runs the servers. Nobody else sees your order, and nothing about you is sold or used for advertising.
How long an order is kept
Order records are kept for as long as the law requires accounting records to be kept, and then deleted. You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted where the law does not require us to keep it — write from the address you used at checkout, or quote the order reference, so we can be sure it is you.
If something looks wrong
A charge you cannot place, a page that does not look like this one, an e-mail asking for a card number: tell us at [email protected]. Keyhalt will never ask you for card details by e-mail, and there is no Keyhalt account to be asked to log in to.
The formal statement of the same facts is on the Privacy page, and what you are buying is set out in the Terms.
Help and FAQ