Техническая обработка checkout-данных — без выдуманной Privacy Policy.Technical checkout-data handling without an invented Privacy Policy.

Checkout attempt хранит только id + fingerprintHash + createdAt и живёт максимум 30 минут. Raw delivery email в этот browser record не записывается; localStorage и cookie checkout не использует.The checkout attempt stores only id + fingerprintHash + createdAt and lasts at most 30 minutes. Raw delivery email is not written to this browser record; checkout uses neither localStorage nor cookies.

Checkout получает delivery email. Payment Reference хранит protected email и HMAC match key; canonical Order содержит только emailHash и не содержит plaintext email.Checkout receives the delivery email. The Payment Reference stores a protected email plus an HMAC match key; the canonical Order contains only emailHash and no plaintext email.

Resolved client address используется для anti-abuse rate limits и превращается в HMAC-keyed bucket identity. Raw client address не сохраняется в Commerce state.The resolved client address is used for anti-abuse rate limits and converted into HMAC-keyed bucket identity. The raw client address is not persisted in Commerce state.

Operational audit whitelist сохраняет технические order/payment/product identifiers, но исключает buyer email, claim bearer и download bearer.The operational audit whitelist keeps technical order/payment/product identifiers while excluding buyer email, claim bearer, and download bearer.

Protected email раскрывается сервером только когда он нужен для purchase-bound delivery. Accountless recovery требует одновременно exact Order ID и тот же purchase email; email-only lookup отсутствует.The protected email is opened server-side when required for purchase-bound delivery. Accountless recovery requires both the exact Order ID and the same purchase email; there is no email-only lookup.

Store не создаёт универсальное утверждение о provider data handling. В текущем RF path purchase email передаётся в YooKassa receipt только когда включён fiscal mode yookassa_receipt. Independent provider-side collection остаётся вне этой технической authority.The Store makes no universal claim about provider data handling. In the current RF path, the purchase email is sent in a YooKassa receipt only when fiscal mode yookassa_receipt is enabled. Independent provider-side collection remains outside this technical authority.