Privacy

Draft. Finalised alongside the ICO data-protection registration before launch. Published now for transparency.

We collect the minimum needed to verify identities and run the register. This notice says what that is and what you can do about it.

What we collect

For sellers: your Discord account and server IDs (public, immutable identifiers), the proofs you add, your staff roster, and your declared payment destination. If you run an identity check, we store only a one-way peppered hash of the document details — never the document or a selfie. For buyers using the check tool: the query you enter, to answer it.

Why, and the lawful basis

Verification and impersonation prevention are our legitimate interests, balanced against your rights in a written assessment. We do not run a secret blocklist: if a record is removed, that is transparent to the person affected, who has a right of reply.

What we do not do

No browser or device fingerprinting — it would require your consent under PECR and would only ever catch honest people. No selling of data. No compiling of profiles across unrelated sources.

Retention

Records live while a seller is listed. Enforcement and linkage signals carry an explicit expiry and are deleted when it passes. Every retained item has a stated period and is actually deleted at the end of it.

Your rights

You can ask for a copy of your data, correction, erasure, or object to processing, and we respond within one month. A human — not an automated system — makes any decision that removes a record.