Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address, username, and password (stored securely using bcrypt hashing). If you sign up via Google or Discord, we receive your name, email, and profile picture from those services.

Seller Information

If you register as a seller, Stripe Connect collects additional information including your legal name, address, date of birth, and bank account details. This information is processed and stored by Stripe — we do not store your bank account or tax identification numbers on our servers.

Transaction Information

We record details of transactions including items purchased, prices, shipping addresses, and tracking information.

Usage Information

We collect information about how you use the Platform, including pages visited, search queries, listings viewed, and device/browser information.

2. How We Use Your Information

• Process transactions and facilitate communication between buyers and sellers
• Send order confirmations, shipping updates, and dispute notifications
• Improve and personalize your experience on the Platform
• Detect and prevent fraud, abuse, and violations of our Terms
• Comply with legal obligations
• Send marketing communications (with your consent; you may opt out at any time)

3. Information Sharing

We do not sell your personal information. We share information only as follows:

• With other users: Your username, display name, rating, and listing information are visible to other users. Shipping address is shared with sellers when you make a purchase.
• With Stripe: Payment and identity verification data is processed by Stripe under their Privacy Policy.
• Legal requirements: We may disclose information when required by law or to protect our rights.

4. Data Security

We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• Bcrypt password hashing
• JWT-based authentication with short-lived access tokens
• Stripe handles all payment card data (we never see or store card numbers)

No system is 100% secure. We cannot guarantee the absolute security of your information.

5. Your Rights

You may:

• Access and update your account information at any time
• Request deletion of your account and associated data
• Opt out of marketing communications
• Request a copy of your data

To exercise these rights, contact us at privacy@bobamarket.gg

6. Cookies

We use localStorage (not cookies) to maintain your session and cart. We may use analytics cookies in the future, at which point this policy will be updated.

7. Children's Privacy

The Platform is not intended for users under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date.

9. Contact

Questions about this Privacy Policy? Contact us at privacy@bobamarket.gg