The data controller responsible for your personal information is GuildGadgets. You may contact the data controller at [[email protected]] or at the postal address listed on this Platform. A designated Data Protection Officer can be reached at [[email protected]].

Information you provide directly: email address, username, password (held only as a salted hash), first name, last name, phone number, shipping/billing address, and profile image. You may also submit marketplace listings, posts, comments, and messages that contain additional personal information.

Information collected automatically:IP address, device and browser type, operating system, referring URLs, and session cookies (SuperTokens session cookies). We also store essential entries in your browser's local storage — your cookie consent record, notification preferences, and your auth session cache — because they are required to operate the service. The location and currency filters you explicitly select are stored in your browser only if you consent to Preferences via the cookie consent banner, and recent searches and recently-visited-page history only if you consent to Analytics; see Section 7 and the Cookie Policy.

We use your personal information to:

• Create, authenticate, and manage your account;
• Facilitate marketplace listings, contracts, bids, and buyer-seller communication;
• Operate the Guild Coin, escrow, and locked_balance features;
• Personalize your feed and surface relevant Subgrids and products;
• Prevent fraud, abuse, and prohibited conduct;
• Improve, debug, and secure the Platform;
• Send service, security, and legal notices required for operation.

We share your personal information only as follows:

• With other users as necessary for marketplace transactions (for example, sharing your shipping address with a seller you have contracted with);
• With service providers who host, secure, and operate the Platform on our behalf, under contracts that require confidentiality and data protection;
• With law enforcement when legally required, or to protect the rights, safety, or property of GuildGadgets, our users, or the public.

We do not sell your personal data. We do not share your personal information for cross-context behavioral advertising.

We retain your personal information for as long as your account is active. After account deletion, we remove or irrevocably anonymize your personal information within a reasonable period, except where we are legally required to retain records (for example, marketplace transaction logs retained for legal, tax, or audit purposes).

Subject to your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate personal information;
• Delete your personal information (the Right to be Forgotten);
• Receive a portable copy of your personal information (data portability);
• Object to or restrict certain processing;
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact [[email protected]]. We will respond within the time limit required by applicable law.

We use cookies for session authentication (SuperTokens session cookies) and localStorage entries for three purposes: essential entries (your cookie consent record, auth session cache, and notification toggle) are required to operate the service and are always present; preferences entries (the location and currency filters you explicitly select) are only written if you consent to Preferences via the cookie consent banner; and analytics entries (your recent searches and recently-visited-page history) are only written if you consent to Analytics. Declining a category stops all future writes in that category and deletes any such data already stored on your device. You can change your choice at any time from your Settings page. For the full list, see the Cookie Policy.

The Platform is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact [[email protected]] and we will delete it.

Your personal information may be processed and stored in [HOSTING_COUNTRY] and may be transferred to other countries in which our service providers operate. Where such transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms.

We may update this Privacy Policy from time to time. Material changes will be notified on the Platform. Continued use after a change takes effect constitutes acceptance of the updated policy.

For any privacy-related questions or requests, contact [[email protected]] or write to our Data Protection Officer at [[email protected]].

European Economic Area & United Kingdom (GDPR): You have the rights listed in Section 6 above. You may lodge a complaint with your local data protection authority.

California (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, opt out of the sale or sharing of your personal information, and not be discriminated against for exercising these rights. We do not sell personal information.

India (DPDP Act 2023): You have the right to access, correct, erase, and nominate, and to grievance redressal. Grievances may be filed per the process on our Grievance Redressal page.