Privacy Policy
Effective Date: January 1, 2025
Your privacy matters to us. This policy explains what information StillPlays collects, how we use it, and the choices you have.
1. What We Collect
Account Information
When you sign up, we collect your name, email address, username, and password (hashed — never stored in plain text). If you become a seller, we also collect the information required by Stripe for identity verification and payouts.
Listing Data
Items you list, collection entries, wantlists, reviews, and community posts are stored and associated with your account.
Payment Information
All payment processing is handled by Stripe. StillPlays does not receive or store your full card number, CVV, or bank details. We only receive anonymised transaction records from Stripe.
Usage & Analytics
We may collect anonymised usage data (pages visited, feature interactions) to improve the platform. This data is not linked to personally identifiable information.
2. How We Use Your Information
We use the information we collect to:
- Operate and maintain the StillPlays marketplace
- Process transactions and send order/shipping notifications
- Facilitate communication between buyers and sellers
- Improve platform features, performance, and reliability
- Detect and prevent fraud, abuse, and policy violations
- Respond to support requests and resolve disputes
3. What We Don't Do
We never sell your personal data to third parties.
We do not use your data for advertising profiling. We do not share your personal information with any third party except as required to operate the platform (see Third-Party Services below) or as required by law.
4. Third-Party Services
StillPlays uses the following third-party services to operate:
- Stripe — Payment processing and seller payouts. Stripe has its own privacy policy governing how they handle financial data.
- Vercel — Platform hosting. Vercel may collect anonymised request logs and performance metrics.
- Vercel Blob — Image storage for listing photos. Uploaded images are stored securely and served via Vercel's CDN.
- Neon (PostgreSQL) — Database hosting for your account data and listings.
These services are carefully chosen and are not authorised to use your data for any purpose other than providing services to StillPlays.
5. Cookies
StillPlays uses a small number of cookies:
- Session cookie — Required for authentication. Expires when you close your browser or log out.
- Preference cookie — Stores your cookie consent choice so we don't ask again on every visit.
- Analytics cookies (optional) — Anonymised usage data if you accept. No personal data is included.
See our full Cookie Policy for more detail and information on how to control cookies.
6. Data Retention
Your account data is retained for as long as your account is active. Completed transaction records are retained for a minimum of 7 years for legal and financial compliance purposes.
If you delete your account, your personal profile data will be removed. Transaction records may be retained in anonymised form where required by law.
7. Your Rights
You have the right to:
- Access — Request a copy of the data we hold about you
- Correction — Ask us to correct inaccurate data
- Deletion — Request deletion of your personal data (subject to legal retention obligations)
- Portability — Request your data in a machine-readable format
To exercise any of these rights, email us at support@stillplays.com.
8. Contact
Privacy questions or requests: support@stillplays.com or visit our Contact page.
Also see our Terms of Service and Cookie Policy.
Back to Home