Privacy Policy

1. Information we collect

• Account data — your username, email address, and a securely hashed password (we never store your password in plain text). If you sign in with Google, we receive your basic Google profile (name, email, avatar).
• Content you submit — tokens you list, posts, replies, comments, profile details, and any audit/KYC links you submit for verification.
• Technical & security data — your IP address at signup (used for security and to prevent referral/abuse fraud), basic device/browser info, and activity needed to operate the Service.
• Payment-related data — for paid services we record your contact email and the on-chain transaction used to pay. We do not collect or store card numbers; crypto payments settle directly on public blockchains.

2. How we use it

• To provide and operate the Service (accounts, listings, feed, watchlist, notifications).
• To send transactional emails (verification codes, password resets, listing approvals, and updates about services you bought).
• To keep Listpad secure — preventing fraud, spam, abuse, and unauthorised access.
• To confirm payments for paid services and activate them.
• To improve the Service.

3. Cookies

We use a small number of cookies that are necessary to run the Service: a sign-in session cookie, a referral-attribution cookie (when you arrive via an invite link), and a preference cookie (e.g. theme). We do not use third-party advertising cookies.

4. Service providers

We use trusted third-party providers to operate Listpad. They process data only to provide their service to us and are not permitted to use it for their own purposes. These fall into the following categories:

• Cloud hosting, database & storage — to run the application and securely store account and content data.
• Email delivery — to send transactional emails (verification codes, password resets, and service notifications).
• Sign-in providers — if you choose social sign-in, to authenticate you.
• Market-data & public blockchain sources — read-only market and on-chain data, including confirming crypto payments. Crypto transactions are public and are permanently recorded on their blockchains.

5. Sharing

We do not sell your personal data. We share it only with the providers above to operate the Service, or where required by law or to protect the rights and safety of Listpad and its users. Public information (your username, profile, posts, and tokens you list) is visible to others by design.

6. Data retention

We keep your data while your account is active and as needed to operate the Service or meet legal obligations. You can ask us to delete your account and associated personal data (some records may be retained where required by law or for fraud prevention).

7. Your choices & rights

You can update your profile in your account settings, and you can request access to, correction of, or deletion of your personal data by contacting us. Depending on where you live, you may have additional rights under local law.

8. Security

We use reasonable measures to protect your data, including password hashing, secure cookies, and access controls. No online service is 100% secure, so we cannot guarantee absolute security.

9. Children

Listpad is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes & contact

We may update this policy; the “Last updated” date below will change. Questions or requests? Contact hello@listpad.xyz.