Who we are & how we protect you

Official channels only

Our only official domain is gifthycards.com (and its www subdomain). Our only official support contacts are support@gifthycards.com and our official community channels: Telegram · Discord · X (@gifthycards). We never ask for your wallet's private keys, seed phrase, or remote access to your device.

If you see another domain, email address, social account or Discord server presenting itself as Gifthycards, treat it as unofficial and report it to us.

How your purchase is protected

• Code-or-refund guarantee. If your payment is confirmed and we cannot deliver a working code, you get a replacement or a refund — see our Refund & Returns Policy.
• Non-custodial payments. Payments are processed by Paymento and go directly to the merchant wallet. We never take custody of your funds, and we never receive or store your private keys.
• Transparent pricing. Prices are shown in USD and converted to crypto at a live rate on the checkout page, so the exact amount is visible before you pay.
• Traceable orders. Every order is recorded with a status you can track under My Orders, and support can trace a payment by its transaction ID.

Security practices

• Passwords are stored as salted bcrypt hashes — never in plain text.
• Gift-card codes are encrypted at rest with AES-256-GCM and shown only to the account that bought them.
• Sessions use httpOnly, same-site cookies; admin areas are role-protected.
• We do not require KYC or identity documents, and we do not sell personal data.
• Security issues can be reported to support@gifthycards.com.

Policies & reputation

Our customer-facing policies are public and versioned: Refund & Returns Policy, Terms of Service, Privacy Policy and FAQ.

We publish verified buyer reviews on our storefront and are reachable publicly on Telegram, Discord and X. If anything here doesn't match your experience, tell us — resolving it publicly is how we earn trust.