Security

Report a problem

If you find a security vulnerability, write to info@buyeverything.top (Bangla or English). Please do not access other users' data, do not run tests that could take the service down, and do not disclose publicly before we have fixed it. We will not take action against researchers who report responsibly.

What we do not hold

Our strongest control is what we never store: no card or payment data, NID, phone number, OTP, address, real name, order records or uploaded files. Passwords exist only as Argon2id hashes and IP addresses only as salted hashes.

If something happens

If password hashes are ever exposed, we will say so promptly on this page and on the home page, in Bangla and English, explaining what happened — and ask you to change that password anywhere else you reused it.

There are currently no notices.