Datenschutzrichtlinie

1. What we collect

When you sign in: your Discord or Roblox account ID, display name, username and avatar picture, as provided by that service. With Discord we only ask for the "identify" permission, so we never receive your email address.

If you add it: your Roblox username and Roblox user ID (we check with Roblox that the account exists).

What you do on the site: the trade ads you post, the messages and offers you send and receive, and when you were last active.

Technical data: like any website, our hosting provider receives your IP address, browser type and the pages you request, in short-lived server logs used for security and to keep the site running.

2. What we never collect

We never ask for or store passwords, email addresses, phone numbers, real names, home addresses, payment details or your Roblox inventory. Please do not post any of this in trade ads or messages.

3. How we use it

We use this information only to run the site: to sign you in, show your trade ads and profile, deliver messages and notifications in real time, show who is online, prevent scams, cross-trading and abuse, keep the site secure, understand which pages are used (with anonymous statistics), and show ads.

For visitors in the EU and UK, our legal bases are: performing our agreement with you (running your account and the features you use), our legitimate interests (security, preventing abuse, improving the site), and your consent where the law requires it (such as personalised advertising cookies).

4. What other players can see

Your display name, avatar, Roblox username (with a link to your Roblox profile), online status and trade ads are public. Messages and offers are visible only to the two people in the conversation, and to us if a conversation is reported or needs to be checked for abuse.

5. Who we share it with

We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising except through Google's ads as described below.

We use these service providers, only to run the site: Vercel (hosting, and anonymous visit statistics through Vercel Web Analytics), Neon (database), Pusher (real-time messages and notifications), Fivemanage (image hosting), Discord and Roblox (sign-in and Roblox username checks) and Google AdSense (ads). Each processes data under its own privacy policy.

We may also disclose information if the law requires it, or to protect players from fraud or harm.

6. Ads and cookies

We use two essential cookies: a session cookie that keeps you signed in and a language cookie. We also store small preferences in your browser (for example that you dismissed the cookie notice, or turned on stock alerts); these never leave your device.

To understand how the site is used, we count visits with Vercel Web Analytics. It sets no cookies and does not identify you: it records the page, the referring site, your country and the type of device and browser, and visitors are counted with an anonymous identifier that is discarded after a day.

Ads are served by Google AdSense. Google and its partners may use cookies to show ads and measure them, and to personalise ads based on your visits to this and other websites. In the EU, UK and Switzerland you are asked for consent first. You can turn off personalised ads at adssettings.google.com and learn how Google uses data at policies.google.com/technologies/partner-sites.

7. Children's privacy

The site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13 (or under the age of digital consent in their country without a parent's consent). If we learn that we have, we delete the account and its data.

Users aged 13 to 17 must have a parent's or guardian's permission. Parents and guardians can ask us to review or delete their child's information at any time by contacting us on our Discord server.

8. How long we keep it

Account details, trade ads and messages are kept while your account exists. When you delete your account, we delete your profile, trade ads and messages within 30 days. Server logs are kept only for a short time. Backups are overwritten on a regular schedule.

9. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California privacy laws), you can ask to access, correct, export or delete your information, object to or restrict how we use it, and withdraw consent at any time. We do not sell or share personal information as defined by California law.

To make a request, contact us on our Discord server. We will answer within 30 days and will not treat you differently for exercising your rights. You can also complain to your local data protection authority.

10. Security

The site uses HTTPS everywhere, and our providers encrypt data at rest. Only the people who run the site can access the database. No system is perfectly secure, so we cannot guarantee absolute security, but we will act quickly and notify you where the law requires it if a breach affects you.

11. International transfers

Our providers may process data in the United States and other countries. Where required, these transfers are protected by the providers' standard contractual clauses or equivalent safeguards.

12. Changes to this policy

We may update this policy; the date above shows the latest version. If a change is significant, we will point it out on the site.

13. Contact

For any privacy question or request, contact us on our Discord server.