Privacy Policy
Last updated: June 7, 2026 • Effective immediately
1.Information We Collect
1.1 Information You Provide:
- Name, email address, phone number, WhatsApp number
- City and location information
- Ad listings including title, description, price, and photos
- Messages sent to other users through our platform
- Payment information (we do not store card numbers; payments go through third-party processors)
1.2 Automatically Collected Information:
- Device type, operating system, and browser type
- IP address and approximate location
- App usage patterns and pages visited
- Session tokens for authentication (stored as secure cookies)
1.3 OAuth / Social Login Information:
- If you sign in with Google or Apple, we receive your name and email address from them
- We store only the OAuth identifier and email; we do not receive your social passwords
2.How We Use Your Information
- To create and manage your account
- To display your ad listings to potential buyers
- To facilitate communication between buyers and sellers
- To process and verify promotion payments
- To send you service-related notifications (not marketing without consent)
- To enforce our Terms and Conditions and prevent fraud
- To improve the Service through analytics
- To comply with legal obligations
3.Data Sharing & Disclosure
We do not sell your personal data. We may share data with:
- Other Users: Your name, city, phone number (if not hidden), and ad details are visible to other users as per your settings.
- Service Providers: Cloudflare (hosting/CDN), Google/Apple (OAuth). These providers have their own privacy policies.
- Legal Authorities: When required by law, court order, or to protect the rights and safety of users.
- Business Transfers: In case of a merger or acquisition, your data may be transferred with appropriate notice.
4.Data Retention
- Account data is retained as long as your account is active.
- Ad listings are retained for 30 days after expiry, then archived.
- Messages are retained for 12 months.
- Upon account deletion, personal data is anonymized within 30 days, except where required by law.
5.Data Security
- All data is transmitted over HTTPS (TLS encryption).
- Passwords are hashed using industry-standard algorithms and never stored in plain text.
- Sessions are managed via secure, HTTP-only cookies.
- We use Cloudflare's infrastructure which provides DDoS protection and secure CDN.
- Access to user data is restricted to authorized personnel only.
6.Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate data through your Profile page.
- Deletion: Request deletion of your account and associated data.
- Portability: Request your data in a machine-readable format.
- Objection: Object to certain types of data processing.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at Worldscrap92@gmail.com.
7.Cookies & Tracking
- We use essential cookies for session management and authentication.
- We use preference cookies to remember your dark/light mode settings.
- We do not use third-party advertising cookies or tracking pixels.
- You can disable cookies in your browser settings, but this may affect functionality.
8.Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us immediately and we will delete it.
9.Third-Party Links
Our Service may contain links to third-party websites (e.g., WhatsApp, payment gateways). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
10.Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or via email. The "Last updated" date at the top indicates when this policy was last revised.