Privacy policy
This page explains which personal data Itempiece processes, why, and what rights you have.
What we collect
Account data (email, display name, language, currency), delivery addresses, orders, wishlist, reviews, notifications and the preferences used to personalize your recommendations. When you pay, Stripe processes your payment data; we only keep a reference to the payment.
Why we process it
To provide the marketplace and fulfil your orders (contract), to prevent fraud and abuse and secure the service (legitimate interest), to comply with accounting and tax law (legal obligation) and, where you enable them, to send notifications.
Who receives it
Our processors: Supabase (database and login), Stripe (payments and seller payouts), Vercel (hosting), Upstash (short-lived rate-limiting counters that include IP addresses) and Meilisearch (search index of listings, no personal data). Sellers receive your name and delivery address only for orders they must ship.
Cookies
We only set strictly necessary cookies: your login session and your language choice. Stripe may set cookies on the payment form to prevent fraud. We use no advertising or tracking cookies, so there is no consent banner.
How long we keep it
Account data until you delete your account. Order and invoice data for as long as accounting and tax law requires. Rate-limiting counters for a few minutes.
Your rights
You can request access, correction, deletion, restriction, portability, and object to processing. You can also complain to your data protection authority. Contact us using the details in the imprint.