Privacy Policy

1. Information we collect

• Account data, your username, email address, and a securely hashed password (we never store your password in plain text). If you sign in with Google, we receive your basic Google profile (name, email, avatar).
• Content you submit, tokens you list, posts, replies, comments, profile details, and any audit/KYC links you submit for verification.
• Technical & security data, your IP address at signup (used for security and to prevent referral/abuse fraud), basic device/browser info, and activity needed to operate the Service.
• Payment-related data, for paid services we record your contact email and the on-chain transaction used to pay. We do not collect or store card numbers; crypto payments settle directly on public blockchains.

2. How we use it

• To provide and operate the Service (accounts, listings, feed, watchlist, notifications).
• To send transactional emails (verification codes, password resets, listing approvals, and updates about services you bought).
• To keep Listpad secure, preventing fraud, spam, abuse, and unauthorised access.
• To confirm payments for paid services and activate them.
• To improve the Service.

3. Cookies

We use only the cookies necessary to run the Service, no advertising or tracking cookies:

• lp_session, keeps you signed in. Set when you log in; expires after a period of inactivity or when you log out.
• lp_ref, remembers which referral link you arrived from, so a signup can be credited correctly. Set only if you arrive via an invite link; expires after 30 days.

Your theme (light/dark) is saved in your browser's local storage, not a cookie, and is never sent to us.

4. Service providers

We use trusted third-party providers to operate Listpad. They process data only to provide their service to us and are not permitted to use it for their own purposes. These fall into the following categories:

• Cloud hosting, database & storage, to run the application and securely store account and content data.
• Email delivery, to send transactional emails (verification codes, password resets, and service notifications).
• Sign-in providers, if you choose social sign-in, to authenticate you.
• Market-data & public blockchain sources, read-only market and on-chain data, including confirming crypto payments. Crypto transactions are public and are permanently recorded on their blockchains.

5. Sharing

We do not sell your personal data. We share it only with the providers above to operate the Service, or where required by law or to protect the rights and safety of Listpad and its users. Public information (your username, profile, posts, and tokens you list) is visible to others by design.

6. Data retention

We keep your data while your account is active and as needed to operate the Service or meet legal obligations. You can ask us to delete your account and associated personal data (some records may be retained where required by law or for fraud prevention).

7. Your choices & rights

You can update your profile in your account settings, and you can request access to, correction of, or deletion of your personal data by contacting us. If applicable data protection law gives you additional rights, for example the GDPR (EU/UK users) or Nigeria's NDPA (Nigerian users), we honour those rights for the personal data described in this policy.

8. Security

We use reasonable measures to protect your data, including password hashing, secure cookies, and access controls. No online service is 100% secure, so we cannot guarantee absolute security.

9. Children

Listpad is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes & contact

We may update this policy; the “Last updated” date below will change. Questions or requests? Contact hello@listpad.xyz.