Privacy Policy

We collect information in the following ways:

Information You Provide Directly:

• Account registration information (email, password, display name)

• Profile information (contact email, location, payment methods)

• Listing information (game details, photos, descriptions, prices)

• Messages and communications (offers, comments, direct messages)

• Payment information (payment method identifiers, but we do not store full payment details)

Information Collected Automatically:

• Browser and device information (IP address, user agent, device type)

• Usage data (pages visited, clicks, time spent)

• Cookies and similar tracking technologies

• Analytics data (through Google Analytics 4)

• Crash reports and error diagnostics (through Firebase Crashlytics, on the mobile app)

• Push notification subscription data (if you enable notifications)

Information From Third Parties:

• Google OAuth profile information (if using Google login)

• Facebook Login profile information (if using Facebook login)

• BoardGameGeek API data (game metadata and images)

• Discord user information (if using Discord notifications)

• Firebase Crashlytics crash and error reports (if using the Android app)

• Stripe payment data (if paying marketplace fee invoices)

We use the information we collect for the following purposes:

• Providing and improving the Service

• Processing transactions and sending related information

• Sending transactional and promotional communications (with your consent)

• Authenticating your identity and preventing fraud

• Personalizing your experience

• Analytics and understanding user behavior

• Responding to your inquiries and requests

• Complying with legal obligations

We may share your information in the following circumstances:

Public Information:

• Your display name, profile picture, and listings are visible to all users

• Your location (zone) during meetups is visible to buyers with pending deals

Between Transacting Parties:

• When an offer is accepted, both parties receive each other's contact information

• This allows coordination of payment and meetup details

Discord Integration:

• If you enable Discord notifications, we share notification content (e.g., offer updates, auction alerts, direct message summaries) with Discord via their API to deliver DMs to your Discord account

• Your Discord user ID is stored to route notifications; we do not access your Discord servers or contacts

Payment Processing (Stripe):

• If you pay marketplace fee invoices online, your payment card details are collected and processed directly by Stripe. We do not store your full card number; Stripe provides us only with a transaction confirmation and last-four digits for record keeping

• Stripe’s handling of your data is governed by the Stripe Privacy Policy

Crash Reporting (Firebase Crashlytics):

• If you use the Android app, Firebase Crashlytics automatically collects crash logs, device information, and app state at the time of an error to help us diagnose and fix issues

• Crash data is anonymized and does not include personal content such as messages or listing details

Service Providers:

• We may share information with vendors who assist in operating our platform (hosting, analytics, payment processing)

• Stripe processes marketplace fee payments on our behalf; your payment card details are handled directly by Stripe and never stored on our servers

• Firebase Crashlytics (Google) collects anonymized crash and error diagnostics from the mobile app to help us improve stability

• These vendors are bound by confidentiality agreements

Legal Requirements:

• We may disclose information if required by law or in response to legal requests

Aggregated Data:

• We may share anonymized, aggregated data for analytics and research

We retain your personal information for as long as necessary to provide the Service:

• Active accounts: Retained indefinitely or until you delete your account

• Deleted accounts: Retained for 30 days, then securely deleted

• Direct messages: Retained while either party has an active account; archived messages remain stored but hidden

• Sold listings: Retained for historical and analytics purposes

• Invoice and fee records: Retained for accounting and tax purposes as required by law

• Payment information: Card details are handled by Stripe and not stored on our servers; transaction confirmations are retained with invoice records

• Analytics data: Retained per Google Analytics default (approximately 14 months)

• Cookies: Retained according to your cookie preferences

We use cookies and similar technologies to:

• Remember your preferences and login information

• Track user behavior and usage patterns

• Provide analytics and improve the Service

• Personalize your experience

You can control cookies through your browser settings. However, disabling cookies may limit some functionality of the Service. We do not use cookies for targeted advertising without your explicit consent.

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data transmission

• Secure password storage using industry-standard hashing

• Access controls and authentication protocols

• Regular security monitoring and updates

However, no security measure is 100% secure. We cannot guarantee absolute protection of your information.

Depending on your location, you may have the following rights:

Access:

• Request access to the personal information we hold about you

Correction:

• Request correction of inaccurate information

Deletion:

• Request deletion of your information (subject to legal retention requirements)

Portability:

• Request a copy of your information in a structured, machine-readable format

Opt-Out:

• Opt out of marketing communications and certain data processing activities

To exercise these rights, contact us using the information in the Contact section below.