Privacy Policy

[LEGAL ENTITY NAME] of [BUSINESS ADDRESS] is the controller of the personal information described here. Contact [PRIVACY EMAIL] with any question or request.

You give us:

• Account details — name, username, email address, password (stored only as a bcrypt hash, never in readable form).
• Optional profile details — avatar, biography.
• Shipping and return addresses, including phone number where a carrier requires one.
• Listing content — photographs, descriptions, grades and certification numbers.
• A blockchain wallet address, only if you choose to supply one.

We generate: order and payment records, authentication outcomes, shipment tracking, messages we send you, and administrative audit entries.

We collect automatically: IP address and basic request information in server logs, and a single session cookie described below.

We never see your card number. Card details go directly to Stripe from your browser. We store only a token and a description such as the last four digits.

To run your account and process orders; to move money and pay sellers; to arrange shipping and authentication; to send transactional email about your orders; to detect fraud and abuse; to meet tax, accounting and legal obligations; and to fix problems with the service.

We do not sell personal information, and we do not share it with third parties for their own advertising. [IF YOU LATER ADD MARKETING EMAIL OR ANALYTICS, SAY SO HERE].

These providers handle data on our behalf, each limited to what their function requires:

We also share information where the law requires it, and with a buyer or seller to the limited extent an order needs it — a seller receives the delivery address for their sale.

We use one cookie, collect_session, which keeps you signed in. It is httpOnly, so page scripts cannot read it, and it expires on sign out or when the session lapses. It is strictly necessary — the site cannot keep you logged in without it — so it is not subject to consent. We run no advertising or analytics cookies.

Account information is kept while your account is open. Order, payment and authentication records are kept for [N YEARS — ASK YOUR ACCOUNTANT] after the order completes, because tax and anti-fraud rules require it. Server logs are kept for a short period. Deleting your account does not delete records we are legally required to retain.

You may ask us to give you a copy of your information, correct it, or delete it. You may also object to certain processing. Email [PRIVACY EMAIL] and we will respond within [N DAYS].

If you are in California, you have rights under the CCPA/CPRA including access, deletion, correction and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined. If you are in the EEA or UK, our lawful bases are contract performance for order handling, legal obligation for tax and accounting, and legitimate interests for fraud prevention. [CONFIRM WHICH REGIMES APPLY WITH COUNSEL].

Passwords are hashed with bcrypt and never stored in readable form. Traffic is encrypted in transit. Sessions are invalidated when a password changes. No system is perfectly secure — if a breach affects you, we will notify you as the law requires.

COLLECT is not for anyone under 18. We do not knowingly collect information from children, and we delete it if we discover we have.

Our infrastructure is hosted in the United States. If you use the service from elsewhere, your information is transferred to and processed in the US. [IF YOU SERVE EEA/UK USERS, ADD A TRANSFER MECHANISM].

We will post any update here and change the date at the top. Material changes will be emailed to you.