Legal
Privacy Policy
Last updated September 3, 2026
The operator’s legal identity, jurisdiction, privacy contact, retention schedule, and region-specific rights process must be added before accepting live payments.
This policy explains the information Sanctuary Bazaar handles when you browse, create an account, post listings, make offers, request mediation, purchase Ducats, or subscribe.
Information collected
- Account information: the stable user ID, email address, and display name supplied through Sign in with ChatGPT.
- Marketplace content: listings, offers, trade values, mediation requests, reputation data, and related timestamps.
- Billing records: Stripe customer and subscription identifiers, payment status, purchased product, and event references. Sanctuary Bazaar does not receive or store complete payment-card numbers.
- Operational information: security, error, request, and device information processed by the hosting and payment providers to operate and protect the service.
How information is used
Information is used to provide accounts and marketplace functions, process and reconcile payments, issue Ducats, prevent duplicate grants and fraud, enforce safety rules, respond to disputes, maintain records, and comply with legal obligations.
When information is shared
Necessary information may be shared with Stripe for billing, the hosting and authentication providers that operate the service, professional advisers, and authorities when legally required. Public listings and display names are visible to marketplace visitors. Personal information is not sold for targeted advertising.
Retention and security
Account, transaction, and safety records are retained only as long as needed for service delivery, fraud prevention, disputes, accounting, and legal obligations. Appropriate technical and organizational safeguards are used, but no internet service can promise absolute security.
Your choices and rights
You may correct public listing information, manage Stripe billing details in the customer portal, and request access, correction, deletion, or restriction where applicable. Some transaction records may need to be retained for legal, security, or accounting reasons. A monitored privacy contact and verified request process will be published before live billing begins.
Children and international use
The Bazaar is not intended for children or anyone below the legal age of majority. Information may be processed in countries different from your own by the service providers identified above, subject to their safeguards and applicable law.
Policy updates
Material changes will be dated and communicated through the service where required. Continued use after an effective update constitutes acceptance only where permitted by law.