Account data: email, handle, display name, country and time zone.

Identity data for sellers: legal name, date of birth, residential address, phone number and tax form type.

From the identity check itself we retain the name, date of birth and issuing country as READ FROM YOUR DOCUMENT, the document type, and the reason if a check did not pass. We keep these to confirm the document matches the details you gave us, which is how impersonation is caught. We do not store the document number and we do not store an image of it. Those stay with the verification provider.

For tax identification numbers we store only the last four characters and a reference held by our tax provider.

Transaction data: orders, prices, fees, payouts and withdrawal history.

Communications: order chat messages, dispute submissions and support tickets.

Technical data: IP address, device and browser information, and security event logs.

To run the marketplace: matching orders, holding order funds until an order is resolved, paying sellers, resolving disputes. This is performance of our contract with you.

To meet legal obligations: identity verification, sanctions screening, tax reporting and fraud prevention.

To keep accounts secure and to detect payment fraud and chargeback abuse. This is our legitimate interest, and yours.

We never see or store full card numbers. Card details are collected by our payment processor's embedded form inside your browser and exchanged directly with them. The same applies to a digital wallet such as Apple Pay or Google Pay, where your device passes a token to the processor rather than your card number to us.

If you pay by PayPal, you authorise the payment on PayPal's own pages. PayPal tells us whether the payment succeeded and gives us a reference for it. We do not receive your PayPal login, your card details, or the funding source you chose.

What we do keep for every payment is the amount, the currency, the method used, the processor's reference, and whether it succeeded, failed, was refunded or was charged back. We need these to match a payment to an order, to answer a chargeback, and to meet financial record-keeping requirements.

We share with our payment and payout providers only what they need to process a transaction or verify an account. For sellers, that includes the identity details described above, because a payout provider is required to verify who it is paying.

Gift-card and top-up codes are encrypted before they reach our database, with a key held only by the application. A database dump does not yield a redeemable code. Only the last four characters are ever displayed, and every access is logged.

Buyers and sellers see each other's handle, public profile, ratings and the order chat. They never see each other's legal name, address, payout details or email.

We share data with our payment processor, payout provider, identity verification provider and tax provider, and with authorities where legally required.

We do not sell personal data, and we do not run advertising on the marketplace.

Our providers operate in several countries. Where data leaves the region it was collected in, it is transferred under the safeguards that region's law requires.

Transaction and identity records are kept for as long as required by financial and tax law, typically seven years. Order chats are kept for two years after an order completes so disputes and chargebacks can be answered. Security logs are kept for twelve months.

We use automated and manual fraud-prevention and risk-assessment tools to evaluate accounts, transactions and payout requests. These tools may flag activity for additional verification, manual review, temporary delay or restriction in order to prevent fraud, abuse, chargebacks and unauthorised transactions.

A flag is a reason to look, not a verdict. Where an automated check holds or restricts something, a person can review that decision and reverse it, and you can ask us to do so using the contact details below.

We do not publish the signals or thresholds these tools use, because doing so would tell the people they exist to stop exactly how to avoid them.

Wherever you are, you can ask us to: give you access to the personal data we hold about you; correct it if it is wrong; delete it, where we are not legally required to keep it; give you a copy in a portable form; stop sending you marketing; and control non-essential cookies.

You can also object to processing we carry out on the basis of legitimate interest, and you can complain to your local data protection authority.

To exercise any of these, email [email protected] from the address on the account. We will confirm the request, verify it is really you, and tell you when it is done. We do not charge for this and we will not treat you differently for asking.

Deletion requests are honoured except where we are legally required to retain records, in which case the account is closed and the remaining data is locked to compliance access only. Identity and transaction records are the usual reason: financial and tax law requires us to keep them.

Some US states give residents additional rights over their personal information, including the right to know what is collected and why, to access and delete it, to correct it, to obtain a portable copy, and to opt out of the sale or sharing of personal information or of targeted advertising. Where those rights apply to you, they are available to you.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Some states also give rights in connection with significant decisions made by automated means. Where those rights apply, you may ask us about the automated fraud and risk checks described above and ask a person to review a decision that affected you.

You can use an authorised agent to make a request on your behalf, and you can appeal if we refuse one. Use the same address: [email protected].