Privacy policy

What we collect

• Account details: email address, display name and a one-way hash of your password. We never store your password itself.
• Orders: what you bought, when, the price and terms you agreed to, delivery status and any refund requests.
• Payments: a reference to the payment from our payment provider and its status. Card details are handled by the provider; we do not receive full card numbers.
• Seller information: for sellers, business details, verification statements and evidence references, payout status and a provider account reference (never bank numbers).
• Security data: session records with a shortened browser description, and a keyed hash of your IP address used for rate limiting and audit logs. We do not keep raw IP addresses in those records.
• What you send us: reviews, reports, and support messages.
• Help chat: the questions you type into the help chat. We do not store them on our servers; your browser keeps the current conversation for this tab only.
• Notifications: your notification choices and, if you turn on browser notifications, the push address your browser gives us for this device. You can turn them off at any time in your account.

How we use it

• To run your account, complete purchases and deliver what you bought.
• To verify sellers and review listings.
• To prevent fraud and abuse, including rate limiting and investigating reports.
• To send service emails such as order confirmations, delivery notices and password resets.
• To meet legal, tax and accounting obligations.

Codes and keys

Codes, keys and seller delivery messages are stored encrypted. They are decrypted only when the buyer who owns the order reveals them, and they are never written to logs.

Who we share it with

• Sellers receive what they need to fulfil your order. For seller-fulfilled and subscription offers this may include your display name and the details you provide in the order. Sellers never receive your password or card details.
• Our payment provider processes payments and refunds.
• Service providers who host the service and send email, under contracts that limit their use of the data.
• Our AI provider, when the help chat uses it, receives your chat questions and public offer details to write a reply. Do not share codes, passwords or card details in the chat.
• Authorities where the law requires it.

Cookies and local storage

We use one essential cookie to keep you signed in. Your browser may store your last few searches on your device to show them as suggestions, the current help chat for this tab, and whether you dismissed a notice; these stay on your device. We do not use advertising cookies.

How long we keep it

We keep account data while your account is open and order records for as long as tax and accounting rules require. Security records are kept for a limited period. Exact retention periods are to be confirmed before launch.

Your choices and rights

Depending on where you live, you can ask to access, correct, export or delete your data, or object to some uses. Contact support from your account. We will verify the request comes from you before acting on it.