Privacy Policy

What we collect

Account information. Your email address, and your name and profile picture if you sign in with Google or upload one. Sign-in is passwordless, so we never hold a password for you.

Things you create. Listings, seller notes, keywords, logos and avatars you upload, offers and counter-offers, messages to sellers, and your watchlist.

Payment records. When you buy a listing plan, a placement, or an advertising slot, Stripe processes the payment. Your card details go to Stripe and never reach us. What we keep is the record of the purchase — what was bought, what it cost, when, and the identifiers that tie it to your account and to any subscription still running.

Usage data. Which listings are viewed and watched, so the marketplace can show what is getting attention. View counts are recorded per network address per listing per day rather than tied to your account.

Analytics. Aggregate measurement of which pages get used, through Vercel Analytics and Google Analytics. See the Cookie Policy.

Advertising enquiries. If you submit an advertising request, the email address, domain, headline, link and logo you provide.

What we do not collect

We never see or store your card details — those go straight to Stripe. We do not buy personal data about you from anyone else, and we do not sell yours.

Why we use it

• To run your account and let you list, offer, and watch.
• To deliver an offer to the seller it was made to, and a counter back to the buyer.
• To take payment for a plan or a placement, and to keep that placement running for as long as it is paid for.
• To send the emails the service depends on — sign-in codes, offer notifications, and confirmation that something you bought is live.
• To review listings, keep the marketplace working, and investigate abuse.

Who sees it

Your seller display name and any listings you publish are public — unless you list anonymously, in which case your name is hidden on that listing.

Your email address is not public. A buyer never sees a seller's address, and a seller never sees a buyer's, until an offer is accepted — accepting is the step that deliberately exchanges the two so the deal can close.

We use third-party services to run the site: hosting and file storage, a database provider, an email provider, a payment processor, analytics providers, and data providers that look up public information about domains. They process data on our instructions.

How long we keep it

Deactivating your account hides your listings and disables sign-in immediately, and 30 days later your account data is permanently deleted. Within those 30 days you can write to us to reactivate; after that there is nothing left to restore.

Payment records we are required to keep for tax, accounting or fraud purposes are retained for as long as the law requires, and are not linked to a usable account. An unconfirmed guest offer is discarded if the email address behind it is never confirmed.

Your choices

Depending on where you live, you may be able to ask for a copy of your data, ask us to correct or delete it, or object to a particular use. Write to team@trustTLD.com and we will respond.

Cookies

See our Cookie Policy.

Contact

TrustTLD team@trustTLD.com