Last updated: 1 October 2026.
We collect only what the club cannot work without, and sell nothing. There are no ads, no third-party analytics and no tracking.
What we keep
- Account: email address, username, sign-up date, roles, whether the email is confirmed, the language you last signed in with (to write to you in it). We never store your password, only its hash (Argon2id), from which it cannot be recovered.
- Profile: your avatar and collection items with their photos. Each collection item can be hidden from others. The service log of your items is seen by you only.
- Forum and marketplace: your topics, posts and listings with their photos and contact. A seller's contact is shown to signed-in members only.
- Deals and reviews: the buyer a seller named when marking a listing sold, and the reviews you exchanged. Reviews are public: they show on the listing and on your profile.
- Favourites and saved searches: the listings you starred and the searches you watch. Only you see them.
- Photos: before storing a photo we re-encode it and strip its metadata, location included.
- Moderation: reports (with a short snapshot of the reported content), moderators' decisions and ban reasons.
Technical data
- Cookies. Just two, both needed for the site to work:
session(signing in; lasts at most 8 hours and ends after 15 idle minutes) andlang(your language, one year). That is why there is no cookie banner. - The colour theme is kept in your browser (localStorage) and never sent to the server.
- Your IP address is used only in the server's memory, to limit overly frequent requests (against password guessing and spam), and is never written down. Request logs hold the method, page path, status and duration — no IP and no query parameters.
Who we share data with
Only with the services the site cannot run without, and only what they need:
- Cloudflare — photo storage (R2) and delivering the site;
- Resend — sending emails (email confirmation, password reset, notices about account changes, reminders that a listing is ending, and emails about unread replies and mentions — at most once every few hours; turn them off on your profile or with the link in the email itself);
- the hosting provider — the server and the database.
We do not sell data or share it for advertising.
How long we keep it
- Your account and content — until you delete them.
- Links in emails work for an hour (password reset or email change) or a day (email confirmation) and are destroyed once used.
- Sessions — 8 hours at most.
- When you delete your account we erase your email, name, password, avatar, listings with their photos and your collection. Forum posts stay, signed "Deleted member", so discussions keep making sense, and so do the reviews you left others. The moderation log and reports are kept as the history of moderation.
Your rights
You can:
- see and change your data on your profile: email, password, avatar, collection;
- delete your account on your profile at any time;
- get a copy of your data or object to its processing — write to us: [email protected];
- complain to the Ukrainian Parliament Commissioner for Human Rights or, in the EU, to your country's data protection authority.
Security
Sessions are stored on the server only as hashes, passwords as hashes with a secret pepper, and the site is served over HTTPS only. After several failed sign-ins an account is locked for a while.
Children
The club is for people aged 16 and over. If you believe a younger child has an account, write to us and we will delete it.
Changes
We announce substantial changes to this policy on the site.
Contact
Questions about your data: [email protected].