1. Information you give us

• Account details: email address, password (stored only as a secure hash by our authentication provider), username, in-game name (IGN) and main world.
• Marketplace content: listings, item stats, prices, buy offers, notes, messages, trade confirmations, actual prices paid and reviews.
• Communications with us, such as support requests or abuse reports.
• Your agreement to these policies, including the date and version accepted.

2. Information collected automatically

• Technical data such as IP address, browser and device type, and pages requested, kept in server and security logs.
• Activity data such as when you were last active and when you last read a conversation (used for unread counts).
• Local browser storage that keeps you signed in and remembers your selected world. We do not use advertising or cross-site tracking cookies.

3. How we use information

• To create and secure your account and let you sign in.
• To show listings, offers, seller profiles, ratings and aggregated price history.
• To deliver messages between trade partners and show notifications.
• To detect and prevent fraud, scams, spam, real-money trading and abuse, and to enforce our Terms of Use.
• To send essential emails such as account confirmation and password resets.
• To maintain, debug and improve the Site.

4. What other users can see

• Public: your username, main world, member-since date, listings, buy offers, completed trade count, ratings and reviews.
• Trade partners only: your IGN, once a seller accepts an offer or a sale is recorded between you.
• Conversation participants only: messages in that conversation.
• Never shown to other users: your email address and password.

5. Price data

Confirmed sale prices and active listing prices are used to build aggregated price statistics (for example a 30-day median). These statistics are shown without names.

6. How we share information

We do not sell or rent personal information, and we do not share it for targeted advertising. We share it only:

• With service providers who host our database, authentication, file storage and email delivery, under contracts that limit their use of the data.
• When required by law, court order or valid legal process, or to protect the rights, safety and property of our users, the public or us.
• In connection with a merger, sale or transfer of the Site, in which case this Policy continues to apply.

7. Data retention

We keep account data while your account exists. When you delete your account we delete or anonymize your personal information within 30 days, except where we must keep limited records for security, fraud prevention or legal obligations. Aggregated, anonymized price statistics may be kept indefinitely. Reviews you left may remain attributed to a deleted user.

8. Security

We use encrypted connections, hashed passwords, and access rules that limit each user to their own private data. No system is perfectly secure, so use a unique password and never share your game or Site credentials with anyone, including people claiming to be staff.

9. Your rights and choices

Depending on where you live (including under the GDPR, UK GDPR, and California CCPA/CPRA), you may have the right to access, correct, download, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit your username, IGN and world in Settings. To make any other request, email us; we will respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

Our legal bases for processing (where GDPR applies) are performing our contract with you, our legitimate interests in running a safe marketplace, compliance with legal obligations, and your consent where requested.

10. Children

The Site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, contact us and we will delete it.

11. International users

Our service providers may store and process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses for international transfers.

12. Changes to this Policy

We may update this Policy. We will change the "Last updated" date and notify you of material changes on the Site or by email before they take effect.

13. Contact

Privacy questions and requests: privacy@classicfreemarket.com.