Privacy Policy
Last updated: October 2026
1. Information We Collect
Account Data: Email address, username, and profile information provided during registration via Clerk.
Transaction Data: Purchase history, payment method metadata, and download access records.
Usage Data: Pages visited, search queries, browser type, device information, and IP address.
Cookies: We use essential cookies for authentication and analytics cookies with your consent.
2. How We Use Your Information
- To process transactions and deliver goods.
- To communicate order updates and support responses.
- To improve the Platform through aggregated, anonymized analytics.
- To enforce our Terms of Service and prevent fraud.
3. Data Sharing
We do not sell your personal data. We share data only with:
- Payment processor: Plisio (and NOWPayments, if enabled) receives your email address, the order amount and the order reference to create and confirm your crypto invoice. Crypto transfers are recorded on public blockchains.
- Email delivery: Brevo sends our transactional email and receives messages sent to our support address.
- Operations: order events, support messages, listing reports and seller applications are forwarded to our team's private Telegram group so we can respond, and support email and seller applications are also stored in our internal CRM.
- Abuse protection: Upstash stores the IP address of API requests for a few minutes and a one-way hash of the checkout email address for about two hours, to limit automated abuse. Cloudflare Turnstile checks that forms are submitted by a person.
- Cloud services: Vercel (hosting, file storage and site analytics), Neon (database), Clerk (authentication).
- Analytics: Google Analytics, only if you accept analytics cookies via the consent banner. You can decline at any time; declining does not affect your ability to use the Platform.
- Law Enforcement: When required by valid legal process.
4. Data Retention
We retain account data for as long as your account is active. Transaction records are retained for 7 years for legal and tax compliance. You may request deletion of your account data by contacting us.
5. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. Contact help@nsfwmarket.com to exercise these rights.
6. Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encrypted-at-rest databases, and strict access controls. However, no system is 100% secure, and we cannot guarantee absolute security.
7. Contact
For privacy enquiries: help@nsfwmarket.com
