> privacy policy

1. Who we are

allegedlynew ("we", "us", "our") operates the marketplace at allegedlynew.shop. We are a peer-to-peer classifieds platform that allows users to buy, sell, and connect. Our contact email is hello@allegedlynew.shop.

2. What data we collect

• Account data: email address, username, avatar, bio (when you sign up)
• Listing data: titles, descriptions, prices, images, and location you provide
• Messages: content of conversations between buyers and sellers
• Payment data: handled entirely by Stripe — we never store card numbers
• Usage data: pages visited, magnet game scores, IP address, browser type
• Location data: approximate country/city (from IP, via ipapi.co) for currency detection

3. How we use your data

• To provide and operate the marketplace
• To process payments through Stripe
• To send transactional emails (account verification, messages)
• To calculate and display your magnet rewards points
• To detect your local currency for a better experience
• To prevent fraud, spam, and abuse

We do not sell your personal data. We do not use your data for advertising.

4. Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA), we process your data under:

• Contract: to provide the marketplace services you signed up for
• Legitimate interests: fraud prevention, security, product improvement
• Consent: cookies (you may withdraw at any time)

5. Cookies

We use essential cookies for authentication (session tokens via Supabase). We also use analytics cookies to understand how the site is used. You can decline non-essential cookies via the banner shown on your first visit. Declining does not affect core functionality.

6. Third-party services

• Supabase — database and authentication (EU/US servers)
• Stripe — payment processing (PCI DSS Level 1 certified)
• Netlify — hosting and CDN
• ipapi.co — IP-based country/currency detection (no data stored)
• Groq / Google Gemini — AI listing assistance (listing text only, not personal data)

7. Data retention

We retain your account data while your account is active. If you delete your account, your personal data is deleted within 30 days. Anonymised transaction records may be retained for up to 7 years for financial compliance.

8. Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent (e.g. for cookies)
• Lodge a complaint with your local data protection authority

To exercise any right, email hello@allegedlynew.shop. We respond within 30 days.

9. Children

allegedlynew is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

10. International transfers

Your data may be processed in the United States or other countries. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers outside the EEA.

11. Changes to this policy

We may update this policy. Material changes will be announced via email or a site notice at least 14 days before they take effect.

12. Contact

Questions? Email us at hello@allegedlynew.shop.