Privacy Policy

Last updated: 2026-09-25

1. Data we collect

Account data: your name, avatar, and email provided by Google Sign-In.
Post data: the listing information you fill in and the screenshots you upload.
Phone verification: your phone number is stored only as a SHA-256 hash — the platform never keeps phone numbers in plain text. We also store an IP hash for anti-abuse (SMS flooding) rate limiting.
Identity verification: a photo of your ID and your real name, kept in an encrypted private storage area, visible only to review administrators during the review period.ID (KYC) verification is handled together with the Blue Check application and is not offered separately.
Connection logs: IP (hashed) and device information, used for fraud prevention and security investigations.

2. How your data is used

As a transaction venue, for member badge and verification status display, fraud investigations, and handling reports.
We will never sell or rent your personal data to any third party.
After verification is complete, ID data is reduced to a masked version of your name for dispute investigations; the original ID photo is retained only for lawful judicial disclosure.

3. Judicial and police disclosure requests

When unlawful activity is suspected and we receive a lawful disclosure request from judicial or police authorities, this platform will cooperate as required by law and provide the relevant connection and registration records. All disclosure requests are recorded in an internal audit log.

Personal data is never handed out: if you have been scammed, the platform will not hand the other party's personal data directly to you (doing so would violate Taiwan's Personal Data Protection Act). Please file a police report first (165 anti-fraud hotline / your local police authority). Once the platform receives an official police document, we will assist in providing the required data as permitted by law.

4. Chat records

In-site messages cannot be deleted or edited, to protect both buyer and seller's right to present evidence in a dispute. Archived evidence is kept in a private storage area, accessible only to administrators and in response to lawful disclosure requests.

5. Your rights

View and correct your public profile (display name, avatar).
Delete your posts and account (ID data is handled according to statutory retention periods).

1. Data we collect

Account data: your name, avatar, and email provided by Google Sign-In.

Post data: the listing information you fill in and the screenshots you upload.

Phone verification: your phone number is stored only as a SHA-256 hash — the platform never keeps phone numbers in plain text. We also store an IP hash for anti-abuse (SMS flooding) rate limiting.

Identity verification: a photo of your ID and your real name, kept in an encrypted private storage area, visible only to review administrators during the review period.ID (KYC) verification is handled together with the Blue Check application and is not offered separately.

Connection logs: IP (hashed) and device information, used for fraud prevention and security investigations.

2. How your data is used

As a transaction venue, for member badge and verification status display, fraud investigations, and handling reports.

We will never sell or rent your personal data to any third party.

After verification is complete, ID data is reduced to a masked version of your name for dispute investigations; the original ID photo is retained only for lawful judicial disclosure.

3. Judicial and police disclosure requests