Privacy Policy
This document explains what personal information we collect, why we collect it, who we share it with, and the rights you have.
Last updated: August 6, 2026
1. Who We Are
FindsWith.com ("we", "our", "the Platform") provides a commerce and community service for creators and buyers to discover, publish, and trade digital and physical goods. Verified operator and data-controller details must be published in our Legal Notice before public launch.
2. Information We Collect
- Account information you provide: your email, display name, password (hashed) and avatar. If you use a third-party sign-in (Google, Facebook, Apple, or X), we read the profile information authorized by that provider, such as email, display name, and avatar.
- Transaction & shipping information: shipping address (country, region, street, contact name, phone number, ZIP / postal code), order number, payment method and amount, shipping status.
- Device & log information: IP address, browser type, operating system, timestamp and pages visited — used for security, anti-fraud and troubleshooting.
- Agreement records: agreement type and version, acceptance time, IP address, browser information, and the associated order or Creator application.
- Content you submit: product images, videos, posts, messages, reviews and comments.
3. How We Use Your Information
- to operate your account, process orders and provide customer support;
- for security, anti-fraud and account safety verification;
- to improve the Platform, through aggregated and anonymized analytics;
- for platform notifications and service updates, where permitted by law or with your consent.
4. Cookies and Similar Technologies
We use cookies to keep you logged in, complete third-party sign-in flows and protect your session against cross-site request forgery (CSRF). The cookies we use include:
session_token— authenticates your session (HttpOnly, ~7 days)oauth_state— state token used during third-party login (HttpOnly, short-lived)
You can disable cookies in your browser, but doing so may prevent certain features (including sign-in) from working.
5. Sharing, Transfers and Disclosure
- We do not sell your personal information to any third party.
- For order fulfillment, we share necessary shipping and contact details with the relevant Creator and logistics providers.
- Payment providers receive the information required to authorize, settle, refund, and reconcile payments. FindsWith.com does not store complete card numbers.
- We may disclose information if required by law, by a valid request from competent authorities, or in emergency situations where life or property is at risk.
- In the event of a merger, acquisition or asset transfer, we will require the new controller to continue to be bound by this Privacy Policy.
6. Storage and Security
- Your data is stored in PostgreSQL. Sensitive values such as passwords are stored using irreversible cryptographic algorithms such as bcrypt.
- Retention: we keep your data for the lifetime of your account plus the minimum period required by law; afterwards the data is either anonymized or securely deleted.
- We use transport-layer encryption (TLS), access controls, and the principle of least privilege to protect your information.
7. Your Rights
- You have the right to access, correct and supplement your personal information.
- You have the right to delete your account — after deletion we retain only the data required by law, then securely delete or anonymize the rest.
- You may revoke your consent to third-party sign-in in the settings of that provider.
- You may request human review of automated decisions affecting your account.
8. Children's Information
The Platform is designed for adult creators and consumers. If you are a minor, please read this Policy and use the Platform under the guidance of your legal guardian. We do not knowingly collect information from children under 14.
9. Cross-Border Transfers
Your data is stored by default in the region where our servers are located. If a transfer outside of that region is required — for example to use a third-party sign-in or payment service — we complete a security assessment and apply safeguards such as encryption and de-identification as required by applicable law.
10. Changes to This Policy
We may update this Privacy Policy. Material changes are announced on the home page for at least 7 days. Your continued use of the Platform after the notice period constitutes acceptance.
11. Contact
If you have any questions, complaints or requests regarding this Privacy Policy, please email [email protected] or submit a request through the Help Center in your account. We respond within 3 business days.
See also: Terms of Service · Returns & Refunds · Legal Notice · About Us
