Privacy Policy

What we store

• From Discord, when you log in: your Discord user ID, display name and avatar. We ask Discord only for your identity (identify scope). We never get your email, password, friends or messages.
• What you enter: in-game name, region, current lobby code, "online" status, listings, offers, offer messages, wishlist, watchlist and reports.
• Technical data: a login session cookie, usage counters that enforce rate limits, and standard server logs from our host.
• The date you accepted the Terms of Use.

We don't use advertising or tracking cookies, and we don't sell your data.

Why we use it

• to run the board: showing listings, delivering offers, showing your lobby code to the right players;
• to keep it safe: rate limits, the profanity filter, reports, moderation and bans;
• to follow the law and answer valid requests from authorities.

Our legal bases are providing the service you asked for, and our legitimate interest in keeping players safe and preventing abuse.

Who can see what

• Everyone: your in-game name, region, avatar, online status and open listings.
• Your lobby code: players whose offer you accepted. While you are "online", also logged-in players or everyone, if you choose that in your profile (by default, nobody else).
• Offers: only you and the other trader. Admins can see them when they handle a report.
• Service providers: our hosting and database provider (Railway) and Discord, for login. Our database is hosted in the United States, so your data is stored and processed there and may be accessible to authorities under US law.

How long we keep it

• Listings expire after 72 hours and are closed for good 7 days after that. Closed and traded listings and their offers stay in your history until you delete your account.
• Expired login sessions and old rate-limit counters are deleted automatically.
• Reports are kept while needed for moderation.
• If you delete your account, we delete it and everything linked to it. The one exception is banned accounts: we keep only the Discord ID and the ban, so the ban can't be dodged by logging in again.

Your rights

You can view and edit your data on your profile, and delete your account there at any time. You also have the right to ask what data we hold about you, to have it corrected, and to withdraw your consent. Withdrawing consent means deleting your account, since the Site can't work without this data.

• Canada: we handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not happy with how we handled a request, you can complain to the Office of the Privacy Commissioner of Canada.
• Quebec: under Quebec's privacy law (Law 25) you can also ask for your data in a portable format. The person in charge of protecting personal information can be reached at [email protected]. You may complain to the Commission d'accès à l'information du Québec.
• EU / UK: under the GDPR you also have the rights to data portability, to object, and to complain to your local data protection authority.

To use any of these rights, contact [email protected]. We will answer within 30 days.

Children

The trading features are for players aged 13 and over. If you believe a younger child has signed up, contact us and we will delete the account.

Changes

If we change this policy in a significant way, we'll say so on the Site.