Your Palatial account
We store your name, email address, password hash, verification records, and sessions. Your email is used for account security and order updates. Your Palatial password is hashed by our authentication system and is not available to administrators.
Your Spotify details
Submitting an order explicitly authorizes our fulfillment team to access the Spotify account for activation. The submitted login is encrypted at rest. Authorized administrators must complete authenticator verification to access fulfillment tools, and credential reveals are recorded in an audit history.
Credentials are cleared from active application storage after completion, cancellation, or expiry. Access expires after seven days for unfulfilled orders, and background retention jobs clear expired details. Encrypted historical versions may remain in provider backups until their retention period expires. A masked hint and non-secret order history remain for support and accounting. Account details are not included in Discord alerts or notification emails.
Service providers
Vercel hosts the application, Neon stores application data, Resend delivers transactional email, and Discord receives limited order alerts. Email delivery shares your recipient address with Resend. Discord alerts contain order references and operational status rather than Spotify login details.
Cookies and security records
Essential, host-only cookies keep you signed in and support two-factor authentication. This application does not use advertising or third-party analytics. Rate-limit records and administrative audit events help detect abuse.
Your choices
Cancel an eligible pending order from your dashboard to clear its submitted login. You can change your Palatial password and sign out. For account-data requests, contact your reseller with your order reference so the operator can verify ownership and assist. Never include a password in support messages.
A practical precaution
Use a unique temporary Spotify password for manual fulfillment and change it through Spotify after activation. No service can guarantee absolute security.
Last updated November 14, 2026.