Privacy policy
This policy explains what personal data the Marketplace website and Android app process, why, who can see it, how long it is kept and how to delete it.
1. What we collect
Only what the service needs:
- Account: your display name, your e-mail address and your password, which is stored only as a one-way Argon2id hash.
- Listings and photos you post. Photos are re-encoded on our server and every piece of metadata (including camera details and GPS location) is removed; the original file is never kept.
- Messages you exchange with other users about a listing, and the reports you file (reason and optional details).
- Safety records: who you blocked, which version of the terms you accepted and when, and moderation decisions about your content or account.
- Sign-in sessions: a random session token, kept in a secure cookie on the website or in the device's secure storage in the app. We do not store your IP address or browser details with your session.
- Abuse protection: short-lived counters of attempts (for example failed sign-ins), stored only as keyed digests of your network address and e-mail address, never in clear text.
- An audit trail of actions (for example "listing published" or "report resolved") that refers to accounts by number and never contains message text, listing text or e-mail addresses.
2. What we do not collect
No location, contacts, advertising identifiers, analytics or crash-reporting tools, and no payment data. The Android app picks photos with the system photo picker and asks for no camera, microphone, location or storage permission.
3. Why we use it
To provide the service you asked for (your account, your listings, your conversations), to keep it safe (limits against abuse, reports, moderation) and to meet legal obligations. We do not sell personal data and do not show advertising.
4. Who can see what
- Everyone: your published listings, their photos and your display name as the seller.
- The person you write to: your display name and your messages. Your e-mail address is never shown to other users.
- Moderators: reported listings, reported conversations and the accounts involved, to review reports.
- Service providers that run the service for us: the hosting provider of the website and database, and the e-mail provider that delivers sign-up and password codes.
5. How long we keep it
While your account exists we keep your account data and content. When you delete your account, your e-mail address, name, password and sessions are erased at once, your listings and photos are removed from view and your open conversations are closed.
Your listings, photos, messages, reports and the safety records about them are then kept, hidden from everyone except moderators, for a limited period for safety, fraud prevention and legal reasons, and then deleted. The length of that period will be stated here before launch. Backups expire on their own schedule.
6. Your choices and rights
You can see your account details on the account page and change your password there. You can delete your account at any time (in the app, or on the account deletion page). To ask for a copy of your data or a correction, contact the operator. Depending on where you live, data protection law may give you further rights.
7. Security
Connections are encrypted (HTTPS). Passwords are hashed with Argon2id, sessions can be ended on every device at once, and access to private data is checked on every request.
8. Contacting Blastek and the demo
This marketplace does not collect customization requests: "Request a customization" opens the Blastek company website, whose own privacy notice applies to what you send there. Requests sent through the earlier request form, if any, are kept until you ask for their deletion at the contact address above.
The public demo needs no personal data and no sign-in: one click opens a private demo for one role, with fictional people and listings. It ends 15 minutes after it starts, and everything in it is then deleted automatically.
9. Children
Marketplace is not intended for children; accounts are for people aged 18 or over.
10. Changes
Each version of this policy has a date. Important changes will be announced in the service.
Marketplace is operated by BLASTEK.
Contact: blastek250@gmail.com