Privacy policy

Last updated September 28, 2026

1. 1. What we collect

   • Account details: username, email, display name, country, and a hashed password.
   • Orders, messages, files and evidence you exchange on the platform.
   • Payment records: amounts, methods and, for crypto, the transaction hash and the addresses you give us.
   • Identity documents, when you verify to sell or withdraw.
   • Technical data: IP address, browser and the times you sign in, used for security and fraud checks.

2. 2. How we use it

   To run your orders and escrow, pay sellers, resolve disputes, prevent fraud, meet legal duties, and send you messages about your account and orders. We do not sell your data.

3. 3. What is protected in storage

   Delivered secrets (licence keys, logins, vault notes and files) and payout details are encrypted. Identity documents and private files are kept outside public storage and are only opened by authorised staff, which is recorded in an audit log.

4. 4. Who sees it

   The other side of an order sees your username, public profile and what you share in the deal room. Payment providers see what they need to process a payment. Staff see what their role requires. We share data with authorities only when the law requires it.

5. 5. How long we keep it

   Order and payment records are kept for as long as financial and tax rules require. You can close your account at any time; we then remove or anonymise what we do not need to keep.

6. 6. Your choices

   You can update your profile, turn email notifications on or off in settings, and ask for a copy or deletion of your data by writing to [email protected].

7. 7. Cookies

   We use cookies only to keep you signed in and to protect forms against cross-site attacks. There are no advertising cookies.