Legal
Privacy Policy
Last updated September 4, 2026
The operator’s legal identity, jurisdiction, privacy contact, retention schedule, and region-specific rights process must be added before accepting live payments.
This policy explains the information Sanctuary Bazaar handles when you browse, create an account, publish profile content, post listings, use daily rewards or Rune Futures, make offers, request mediation, purchase Ducats, or subscribe.
Information collected
- Account information: the Supabase authentication user ID, verified email address, and optional display name, plus the public handle, bio, join date, name-change history, referral relationship, and badges you earn.
- Public community content: profile posts, listings, public trading statistics, reputation rank, achievement badges, and related timestamps.
- Marketplace and activity records: offers, Ducat transfers and fees, saved market favorites, liquidity deposits and withdrawals, pool shares, trade values, mediation requests, daily reward results, Rune and Perfect Gem Futures positions, AMM settlements, Ducat ledger entries, and related timestamps.
- Billing records: Stripe customer and subscription identifiers, payment status, purchased product, and event references. Sanctuary Bazaar does not receive or store complete payment-card numbers.
- Operational information: security, error, request, and device information processed by Supabase, the hosting platform, and Stripe to operate and protect the service.
How information is used
Information is used to provide accounts and marketplace functions, process and reconcile payments, issue Ducats, prevent duplicate grants and fraud, enforce safety rules, respond to disputes, maintain records, and comply with legal obligations.
When information is shared
Necessary information may be shared with Stripe for billing, the hosting and authentication providers that operate the service, professional advisers, and authorities when legally required. Public handles, bios, profile posts, ranks, statistics, and listings are visible to marketplace visitors. Email addresses, internal account IDs, and payment identifiers are not displayed on public profiles. Personal information is not sold for targeted advertising.
Retention and security
Account, transaction, and safety records are retained only as long as needed for service delivery, fraud prevention, disputes, accounting, and legal obligations. Appropriate technical and organizational safeguards are used, but no internet service can promise absolute security.
Your choices and rights
You may correct public listing information, manage Stripe billing details in the customer portal, and request access, correction, deletion, or restriction where applicable. Some transaction records may need to be retained for legal, security, or accounting reasons. A monitored privacy contact and verified request process will be published before live billing begins.
Children and international use
The Bazaar is not intended for children or anyone below the legal age of majority. Information may be processed in countries different from your own by the service providers identified above, subject to their safeguards and applicable law.
Policy updates
Material changes will be dated and communicated through the service where required. Continued use after an effective update constitutes acceptance only where permitted by law.