1. Information we collect
When you register an account we collect your email address and a display name. Passwords are stored only as salted hashes — never in plain text. When you make a deposit we record the transaction hash, network, and amount so we can verify and credit your wallet.
2. How we use your information
- To operate your account and deliver purchases to it.
- To verify crypto deposits and process refunds of locked bid funds.
- To provide support via email, Telegram, or the in-site chat widget.
- To detect and prevent fraud, abuse, and bidding manipulation.
3. What we do not do
We do not sell your personal information, and we do not share it with third parties except where required to operate the service (for example, fraud prevention) or when compelled by law.
4. Cookies & session data
We use a single HTTP-only session cookie to keep you signed in. It contains no personal data — just a signed token. Analytics or advertising scripts, if enabled, are governed by their own providers' privacy policies.
5. Data retention
Account and order records are retained for as long as your account is active. Activity logs are archived after 90 days and may be kept longer for security auditing. You can request deletion of your account at any time via the contact channels below; we will remove personal data except where retention is required for legal or fraud-prevention purposes.
6. Security
All traffic is served over HTTPS. Passwords are hashed, session tokens are signed, and deposits are manually verified before your balance is credited. No payment card data is ever collected — deposits are cryptocurrency only.
7. Your choices
You can update your display name from your account settings at any time. To access, correct, or delete your personal data, reach us via the channels on the contact page.
8. Changes to this policy
We may update this policy as the service evolves. Material changes will be announced on the site. Continued use after an update constitutes acceptance.
