TradingKeep Privacy Policy

TradingKeep ("we," "us") is a free, peer-to-peer barter marketplace for video-game items, built around one promise: Game trading, kept safe. This Privacy Policy explains exactly what information we collect, why we collect it, who we share it with, and the controls you have over it. We've written it in plain language on purpose.

This document is a starting template that the site owner has reviewed. It is not legal advice. If you need advice about your specific situation, please talk to a qualified lawyer.

This policy works alongside our Terms of Service and our Community Guidelines. The Terms explain the rules for using TradingKeep, and the Community Guidelines explain how trust, reporting, and moderation work. This Privacy Policy focuses only on your data.

Here's the gist, with the details below:

• You sign in with Google or Discord. We never see or store a password for your TradingKeep account.
• We store the information you create on the site — your handle, profile, listings, offers, in-thread messages, reviews, and your completed-trade history — because that's what makes the marketplace work.
• We keep limited technical data (like your IP address and timestamps) to fight abuse, prevent scams, and keep the site secure.
• If you take out a paid membership (Supporter or Warden), payment is handled by Stripe. We never see or store your card number.
• We do NOT sell your personal data.
• You can view, change, or delete your information — see "Your choices and rights" below, or just email support@tradingkeep.com.

TradingKeep is a place where players post listings to trade their in-game items for OTHER in-game items. Diablo II: Resurrected is our first supported game. It is barter only — trading items for real money is prohibited, and a listing's "price" is always other in-game items, never currency.

Very important for understanding your data: TradingKeep never holds, escrows, or transfers your items, money, or game accounts. Every trade happens entirely in-game, directly between two players. We just help you find each other and record when both sides confirm a trade is done. We are not a party to any trade. TradingKeep is also a fan-made site and is not affiliated with, endorsed by, or sponsored by Blizzard Entertainment or any game publisher.

Because we never handle your in-game property or your real money for trades, we also never need to collect the sensitive data that a store or escrow service would (no payment details for trades, no in-game logins, no account credentials).

We only collect what we need to run the marketplace and keep it safe. Here's the full list.

• Account and sign-in info: You log in with Google or Discord (OAuth). From your provider we receive a basic identifier and the email address tied to that account, and we create your TradingKeep account from it. We do NOT store a password for you, because you don't have one with us — your provider handles that. We do store the connection tokens your provider gives us so we can keep you signed in.
• Your public handle: A unique display name. Handles are checked case-insensitively so lookalike impersonation (like "RuneBaron" vs "runebaron") is blocked.
• Profile details (optional): A short bio, a chosen title, a stock avatar (we don't host avatar uploads), your timezone, and per-platform in-game tags (for example, your Battle.net, PSN, Xbox, Switch, or Steam name) so the other trader knows who to add in-game. These tags are validated to reject links and off-platform contact info, so they stay legitimate game IDs.
• Listings and offers: The items you post to trade, the items you want, quantities, item rolls/stats, and the offers you send or receive.
• Messages: Messages you send inside an offer thread. Messaging only exists inside offer threads, and outbound links and external contact info are filtered out to prevent scam-link lures.
• Reviews and trust signals: Reviews you leave or receive (which are tied to verified trades), plus your trust counters — completed trades, review count and rating, and any confirmed scam flags.
• Trade records: When both sides confirm a trade ("dual-confirmed"), we record a snapshot of what was traded. This is the data that powers our community market values.
• Reports you file: If you report a scam or harassment, we store the report, the reason, and any optional detail you add. Report detail is visible only to our moderators, never to other users.
• Preferences: Settings like your language, whether you appear offline, whether you opt in to leaderboards, and whether you opt in to marketing emails.
• Membership billing reference (if you pay): A Stripe customer reference and your membership tier (Supporter or Warden) and expiry date. We never see or store your card number.
• Technical and security data: Your IP address and timestamps of activity. We use these for rate-limiting, abuse and scam prevention, and security.

To be explicit:

• No passwords for your TradingKeep account — sign-in is handled by Google or Discord.
• No card numbers or full payment details — Stripe handles all of that.
• No in-game account logins or credentials — all trades happen in-game, between you and the other player.
• No free-text data beyond what's listed above. The only deliberate free-text exception is the optional detail you add to a report, which is moderator-only.

We use the data above for these purposes, and no hidden ones:

• To run the marketplace: create your account, show your profile, publish your listings, route offers and messages, and record completed trades.
• To power trust and safety: tie reviews to verified trades, calculate trust tiers, and display confirmed scam flags publicly on a profile so others can trade carefully.
• To prevent abuse and scams: rate-limit activity, detect and block scam links, and act on reports. Moderators can warn users, hide content, or ban accounts.
• To build community market values: use dual-confirmed trade snapshots to show what items actually trade for.
• To provide support: respond when you contact support@tradingkeep.com.
• To handle membership billing: confirm your Supporter or Warden membership and unlock its perks (memberships never buy items and never affect a trade's outcome).
• To keep the site secure and working: maintain login sessions, remember your language, and protect against attacks.

We keep cookies minimal and first-party. Today we use cookies for two things:

• A login/session cookie, so you stay signed in.
• A language-preference cookie, so the site shows in your chosen language.

TradingKeep is free. We may enable Google AdSense in the future to help cover costs. If we do, AdSense would set its own advertising cookies, which can be used to show and measure ads. We're disclosing this now so it's never a surprise. If and when ads go live, we'll update this policy with the specifics and any controls available to you. Even then, we do not sell your personal data.

We share data only where it's needed to run the service, and never to sell it. Here's everyone in the chain:

• Hosting and database (Neon / PostgreSQL): stores the data described above on our behalf, in the United States.
• Sign-in providers (Google and Discord): you authenticate through them; they share a basic identifier and your email with us.
• Payments (Stripe): if you take out a paid membership, Stripe processes your payment and holds your card details. We only receive a customer reference and your tier/expiry.
• Legal and safety: we may disclose information if required by law, to respond to valid legal requests, or to protect the safety, rights, or property of our users and the platform (for example, investigating a scam ring).
• Other users — by design: the things you make public are visible to others. Your handle, profile, listings, reviews, and any confirmed scam flags are shown publicly. The person you're trading with sees your offer-thread messages and the platform tags you've added so they can reach you in-game.

We do not sell your personal data, and we never have. The list above is the complete set of who touches your data and why.

Your data is stored in the United States (on Neon / PostgreSQL). If you access TradingKeep from another country, your information will be processed in the US.

We keep your account and the content you create for as long as your account is active. When you ask us to delete your account, we remove or anonymize your personal information. One honest exception: completed dual-confirmed trade records are the backbone of our community market values, so rather than deleting them outright, we anonymize them — they're disconnected from your identity but the trade itself can remain in the value data. We also keep limited security logs for a reasonable period to protect the platform, and we may retain information where the law requires it.

We design for safety, not dark patterns. Sign-in runs through Google or Discord, so we never hold your password. Payments run through Stripe, so we never hold your card number. We use rate-limiting and abuse detection (using IP and timestamps) to block attacks, and we filter outbound links and off-platform contact info to cut down on scam lures.

No online service can promise perfect security, and because trades happen in-game between players, we can't control what happens off our platform. Please use the safety basics: never share your account password, never hand over items before you receive yours, and use the trust signals (reviews, trust tier, and scam-flag badges). You can read the full guidance on our Stay Safe page and in our Community Guidelines.

You're in control of your information. Here's how:

• Access and review: View your profile, listings, offers, messages, reviews, and trade history right in the app while signed in.
• Edit your profile: Change your handle, bio, title, avatar, timezone, and platform tags in your settings at any time.
• Control your visibility: Choose to appear offline, opt in or out of leaderboards, and opt in or out of marketing emails — all from your settings.
• Delete your account: Email support@tradingkeep.com to request deletion. We'll remove or anonymize your personal information (with the trade-records exception explained above).
• Ask us anything about your data: For access, correction, or deletion requests — or any privacy question — email support@tradingkeep.com.
• Manage cookies and ads: You can control cookies through your browser settings. If advertising cookies are ever introduced via AdSense, we'll provide the relevant controls at that time.

TradingKeep is for users who are 13 or older — and old enough under their local law and the game's own terms. Use by anyone under 13 is not allowed, and we don't knowingly collect information from children under 13. If you believe a child under 13 has given us personal information, please email support@tradingkeep.com and we'll delete it.

If we change how we handle your data — for example, if we turn on advertising — we'll update this policy and revise the effective date at the top. For significant changes, we'll make a reasonable effort to let you know. Continuing to use TradingKeep after an update means you accept the revised policy.

Questions, requests, or concerns about your privacy? Email us at support@tradingkeep.com. This is also the address for data access and deletion requests, and for intellectual-property or DMCA notices.

Note for the owner to review: This template assumes a US base and references US-focused rules like COPPA. Depending on where your users are, you may have additional obligations (for example, under GDPR in the EU/UK or CCPA/CPRA in California). Please have this reviewed before launch. Governing law for the related Terms is a placeholder flagged for your review.