Privacy Policy

1. Who we are

Datchit (datchit.com) is operated by Hyperion Digital, based in New Hampshire, USA, which is the data controller for the personal information described here. Contact: quadjetfan@gmail.com.

2. What we collect

• Account data — your email address, display name, and a hashed password (we never store the password itself).
• Seller profile — the display name and details you provide to sell.
• Listings — titles, descriptions, prices, photos, and video you upload.
• Orders — items, amounts, order status, and the shipping address you enter at checkout.
• Activity — auctions you watch and questions or answers you post.
• Technical data — IP address, browser user-agent, and request logs used for security, rate limiting, and abuse prevention.

3. What we don't collect

We never see or store your card or bank details — Stripe and PayPal process payments under their own privacy policies. We run no advertising trackers and no third-party analytics.

4. How we use information

We use your information to operate the marketplace: showing listings, processing reservations and orders, sending transactional email (account verification, password reset), preventing fraud and abuse, and meeting legal obligations. We do not sell personal data and we do not use it for third-party marketing.

5. Sub-processors

We share data with these service providers only as needed to run Datchit:

Separately, when you buy an item, your shipping name and address are shared with that auction's seller — not a service provider — so they can fulfil your order.

6. Cookies

Datchit uses only essential cookies: the session cookie that keeps you signed in and protects your account. There are no tracking, advertising, or analytics cookies. The one-time banner you see on your first visit explains this; because nothing optional is stored, there is nothing to opt out of beyond not signing in.

7. Data retention

Account data is kept while your account exists and deleted on a verified deletion request. Records of financial transactions (orders, payments, refunds) are retained for seven years to meet tax, accounting, and anti-fraud obligations, and survive account deletion in de-identified or minimized form where possible.

8. Your rights

Wherever you live, we honor requests to access, correct, export, or delete your personal information (the rights GDPR and CCPA describe). You can delete your account yourself at any time from Settings → Danger zone, which removes your personal information and signs you out; de-identified records of past transactions are retained as described above. For access, correction, or export requests — or if self-serve deletion is blocked by an in-progress order — email quadjetfan@gmail.com from your account address and we will respond, normally within 30 days. We will not discriminate against you for exercising these rights.

9. Children

Datchit is not directed at anyone under 18, and we do not knowingly collect data from minors. Accounts discovered to belong to minors will be removed.

10. Security

Traffic is encrypted with TLS, passwords are hashed, and internal access follows least privilege. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

11. Changes and contact

We may update this policy; material changes will be announced on the site with a new effective date. See also the Terms of Service and the Refunds & Disputes policy. Contact: quadjetfan@gmail.com.