Privacy

Short version: we store the minimum we need to run an escrow marketplace. We don't sell your data, we don't run analytics or ad pixels, and we never see your Roblox password.

What we store

• Your Roblox user ID, username, display name, and avatar URL.
• Your wallet balance and ledger of deposits, holds, and payouts.
• Your orders, listings, disputes, and messages tied to them.
• A session token (signed JWT) in an HTTP-only cookie so you stay logged in.

What we don't store

• Your Roblox password — that lives with Roblox.
• Card numbers — those go directly to Pandabase.
• Crypto private keys — those go directly to NowPayments.
• Analytics or ad-tracking cookies. We don't use them yet.

Third parties that touch your data

• Roblox — OAuth provider, gives us your basic profile.
• Pandabase — fiat payment processor (cards / Apple Pay).
• NowPayments — crypto payment processor.
• OVH — host of our Coolify deployment. Standard server logs may include your IP.

Data retention & deletion

We keep your data while your account is active. To delete your account, message us in the operator's Discord and we'll wipe your row. We retain finalized financial records (orders, payouts) for as long as our payment processors require.