Privacy Policy

1. What we collect

We collect only what we need to run aqua:

• Account data — username, email, password hash, and (if you connect them) Discord and Google IDs.
• Listing and trade data — listings you post, escrows you open, vouches you give and receive.
• Messages — the contents of conversations between you and other users on aqua.
• Payment data — payment processor IDs and transaction metadata. We do not store full card or crypto-wallet credentials.
• Device data — IP, user agent, and basic logs for security and abuse prevention.

2. How we use it

• To run the marketplace, escrow, and vouch systems.
• To verify ownership of listings and resolve disputes.
• To detect and prevent fraud, scams, and abuse.
• To send transactional notifications (escrow updates, password resets, security alerts).
• To comply with legal requests when we are required to do so.

3. Sharing

We share data only with the parties needed to run the service:

• Payment processors and crypto on-ramps to move funds.
• Hosting and email providers to deliver the service.
• Law enforcement, when we receive a valid legal request.

We do not sell your personal data. We do not show third-party ads.

4. Public information

Your username, listings, vouches, and total deal volume are public. Your email, password, messages, and payment data are not. Verified listings show the "verified by aqua" badge but do not reveal anything you didn't already include in the listing.

5. Retention

We keep account data while your account is open and for a reasonable period after closure for safety, dispute resolution, and legal compliance. Trade and vouch records may be kept longer in anonymized form to protect future buyers.

6. Your rights

Depending on where you live, you may have the right to:

• access the data we hold about you;
• correct or delete your data;
• export a copy of your data;
• object to certain uses.

Email us to exercise these rights.

7. Cookies

We use cookies and similar storage to keep you signed in, remember preferences, and detect abuse. We do not use third-party advertising cookies.

8. Security

Passwords are stored hashed. Sensitive data is encrypted in transit. No system is perfectly secure, so use a strong password and enable 2FA.

9. Children

aqua is not intended for children under 13. If we learn we collected data from someone under 13 without parental consent, we will delete it.

10. Changes

We may update this policy. Material changes will be announced in-product or by email. The "last updated" date at the top of this page reflects the current version.

11. Contact

Privacy questions? Reach us on Discord or Telegram.