Privacy Policy
Version 2026-11. This page says what we collect, why, and what you can do about it.
What we collect
- Account: e-mail, a salted hash of your password (never the password), name and company if you give them, the language and Telegram name you set, and your two-factor settings.
- Orders and payments: the pages, texts and links you send, the invoice, the amount and the transaction ID of the blockchain payment, and your account balance. Blockchain data is public by nature.
- Messages: support tickets and chat messages, and the e-mails and Telegram messages we send you.
- Technical data: your IP address, browser name and the pages you open, kept in a system log for 30 days to run and protect the service (limits, abuse, errors). We do not store passwords or form contents there.
- Newsletter: your e-mail address (or your Telegram link), the country you chose, the time and address from which you accepted the Terms, and whether you confirmed.
- Publisher requests: the site data, name, e-mail and Telegram that you send in the form.
Why we use it
To provide the marketplace (accounts, orders, escrow, publication, support), to protect it against fraud and abuse, to send messages about your orders and, if you subscribed, the weekly list of new sites, and to meet legal duties. We do not sell your data. Visit statistics are collected through Google Tag Manager.
Cookies and similar storage
We use what the site needs to work, and Google Tag Manager for statistics. The statistics tags run from the first page view, before you press "Got it". They are set up in our Google Tag Manager account and may set their own cookies. We do not sell data and we do not run advertising on this site.
| Name | Purpose | Kept |
|---|---|---|
| session cookie | keeps you signed in and protects forms | until you sign out or it expires |
| referral cookie | remembers an invitation link until you sign up | 30 days |
| sign-in step cookie | holds the second step of a two-factor sign-in | a few minutes |
| browser storage (cookie notice, newsletter window, table columns) | remembers that you closed a notice or your column choice | on your device |
| Google Tag Manager and the tags in it | visit statistics: pages opened, where visitors come from | set by Google while you use the site |
| Chat on the home page | a random chat number, so your conversation is still there when you come back | up to 30 days |
| Cloudflare Turnstile | the robot check on forms, when it is switched on | set by Cloudflare while you use the form |
Who else sees it
We use service providers to run the site: hosting, e-mail delivery, Telegram (if you connect it), Google (Tag Manager, statistics), Cloudflare (robot check and delivery) and public blockchain nodes to see whether a payment arrived. They get only what they need for this. We may disclose data when the law requires it.
How long we keep it
Account and order data: while the account exists and as long as needed for accounting and disputes. System log: 30 days. Newsletter: until you unsubscribe; we keep a short record of the consent. Support messages: as long as needed to help you.
Your choices
- Unsubscribe from the newsletter with the link in any message.
- Ask us for a copy of your data, a correction or deletion of your account: write to [email protected]. Some records (payments, orders) may have to be kept.
- Disconnect Telegram any time with /stop in the bot, or from your account settings.
Security
Passwords are hashed, sessions are signed, two-factor sign-in is available, and access to the admin area is limited. No system is perfectly safe: use a strong unique password and turn two-factor on.