Privacy Policy

1. Data we collect

Account information

• Email address, username, and password (stored securely via Supabase Auth)
• Profile details you provide (bio, country, avatar, preferences)
• Seller application data if you apply to sell (legal name, date of birth, country, notes)

Transaction and marketplace data

• Orders, listings, messages, reviews, disputes, and wishlists
• Payment metadata from Stripe (amounts, status, transaction IDs — not full card numbers)

Technical data

• IP address, browser type, device information, and usage logs
• Cookies and similar technologies (see below)

2. How we use your data

• Provide and operate the marketplace, escrow workflow, and dashboards
• Process payments and prevent fraud
• Review seller applications and moderate listings
• Send transactional notifications (order updates, security alerts)
• Improve the platform and comply with legal obligations

3. Legal bases (EEA/UK users)

Where applicable, we process data based on:

• Contract — to provide the service you signed up for
• Legitimate interests — security, fraud prevention, and platform improvement
• Consent — where required for optional communications or cookies
• Legal obligation — tax, record-keeping, or law enforcement requests

4. Service providers

We share data with trusted processors who help us run RealmVault, including:

• Supabase — authentication, database, file storage, and realtime features
• Stripe — payment processing and checkout
• Vercel — website hosting and deployment

These providers process data under their own privacy policies and our instructions. We do not sell your personal information.

5. Data retention

We keep account and transaction records as long as your account is active and as needed for legal, tax, and dispute resolution purposes. You may request deletion of your account subject to obligations to retain certain transaction records.

6. Security

We use industry-standard measures including encrypted connections (HTTPS), row-level database security, and access controls. No method of transmission over the internet is 100% secure; please use a strong password and enable available account protections.

7. Cookies and local storage

We use cookies and browser storage to:

• Keep you signed in (session cookies via Supabase Auth)
• Remember preferences and protect against abuse
• Analyze basic site performance where enabled

You can control cookies through your browser settings or our Cookie Policy. Disabling essential cookies may prevent you from logging in or completing checkout.

8. Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

To exercise these rights, contact privacy@realmvault.cc. We will respond within a reasonable timeframe.

9. International transfers

Our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

10. Children

RealmVault is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us to request deletion.

11. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes may be communicated by email or in-app notice.

12. Contact

Privacy questions: privacy@realmvault.cc
General support: support@realmvault.cc
See also our Terms of Service.