Cartcord

    Security and responsible reporting

    How Cartcord handles account access, payments, digital delivery, and reports of security problems.

    0% sales commissionDirect PayPal payoutsAutomated delivery

    Account and store access

    Cartcord uses Discord sign-in and store access permissions to identify buyers and authorized store staff. Never share Discord tokens, PayPal secrets, private download URLs, or license-key pools in a support message or a public channel.

    Payments and responsibilities

    Cartcord charges a server plan and 0% platform sales commission. PayPal processing fees and possible holds apply. The seller is responsible for product rights, taxes, refund decisions, compatibility information, and meeting the rules of the platform where a product is used. Cartcord is not a merchant of record.

    Delivery and private assets

    Products support configured files, links, license-key pools, one-time Discord roles, and manual delivery. A delivery failure can require a seller to retry after correcting permissions or buyer DM settings. Managed assets and optional single-use downloads are available on eligible plans. Signed license verification requires explicit product setup and developer integration. Key delivery alone does not enforce activation, and downloaded files can still be copied. Timed passes require an available expiry service; recurring buyer payments and game-server command delivery are not released.

    Report a suspected vulnerability

    Contact Cartcord support with the affected URL, reproduction steps, expected and observed behavior, and the approximate time. Redact credentials and personal information. Use only accounts and stores you are authorized to test; stop if another person's private data becomes visible. We do not publish an unverified certification or a guaranteed response deadline.

    Contact Cartcord