Privacy Policy

Last updated: September 20, 2026

This policy explains what Stallcrate collects and how we use it for this digital-goods marketplace.

Information we collect

• Account data — email, password hash, optional display name, and shop profile (name, slug, bio).
• Listings & files — titles, descriptions, prices, cover images, and the digital files you upload to sell.
• Orders — which listings you buy or sell, amounts, fees, and payment status.
• Technical data — session cookies, basic server logs (IP, user agent) for security and reliability.
• Payments — processed by Stripe. We store Stripe customer/account identifiers and session IDs; we do not store full card numbers.

How we use information

To operate the marketplace: authenticate you, host listings, complete checkouts, deliver download links, calculate the 15% platform fee and estimated payment-processing fees, prevent abuse, and improve the service.

Sharing

We share data with Stripe for payments and payouts, and with email providers if transactional email is configured. We do not sell your personal information. Sellers see buyer email on paid orders so they can support delivery.

Retention

We keep account, shop, listing, and order records while your account is active and as needed for legal, tax, or dispute purposes. You may request account closure; we may retain limited records where required.

Security

Passwords are hashed. Download links expire and have download limits. No method of transmission or storage is perfectly secure.

Your choices

You can update shop settings, delete your own listings, and log out to end a session. Contact us to request account deletion or a copy of your data where applicable.

Children

Stallcrate is not directed at children under 13 (or the equivalent age in your jurisdiction).

Changes

We may update this policy; the “Last updated” date will change when we do.