Privacy

The short version

tregonomi.com is a noticeboard. It holds the account you registered, the listings you posted, the messages you sent and the ratings you left. It sells none of it, shares none of it with advertisers, and does not track what you read or search for. Your phone number and the text of your messages are encrypted before they are written to disk. To fight fraud and illegal goods, it records the network address of a few actions — registering, logging in, posting and messaging — for 90 days, and gives it to the police only on a lawful request. You can download everything we hold at any time, and you can delete your account yourself.

Who is responsible

The operator of tregonomi.com decides what is done with this data and is responsible for it. Write to privatesia@tregonomi.com with any question about it, including a request to see, correct or delete what is held.

What we hold

Four kinds of thing, and nothing beyond them:

• Your account: email address, a hash of your password, your display name, whether the address is confirmed, and — only if you enter them — your town and phone number.
• What you write: your listings, the messages you send, and the ratings and comments you leave about sellers.
• The minimum needed to keep the site working: which device sessions are signed in, and a one-way hash of the network address a registration came from, used to stop someone opening a thousand accounts.
• A security log: when you register, log in, reset your password, post or change a listing, or send a message, we record which account did it, when, from which network address and with which browser. It is explained in the next section.

The security log

Fraud, stolen goods and threats happen on every marketplace, and the only way to trace them afterwards is to know which account did what, and from where. So for the actions listed above we keep the account, the time, the network (IP) address and the browser's description of itself. We do not record which pages you read or what you search for. The address is encrypted in the database. The log is kept for 90 days and then deleted automatically. Only an administrator can read it, only by stating a reason, and every time they do, that is recorded.

• It is used to investigate fraud, illegal goods and abuse on this site, and to answer a lawful request from the police, a prosecutor or a court.
• When an authority asks us to preserve the records of a specific account, those records are kept beyond 90 days until the request is closed.
• We report information to the authorities ourselves when it suggests a crime that threatens someone's life or safety, as the EU Digital Services Act (Article 18) requires.
• Deleting your account does not delete the log. Each entry still disappears 90 days after it was made.
• Your own entries are part of the data download in your account, under Security.

Counting visits without knowing who

To learn which parts of the site are used, the server adds one to a few daily totals for each page opened: which kind of page, whether it was a phone, a tablet or a computer, the language, and whether the visitor came from a search engine, a social network, a messaging app or another website. For searches it counts the words searched and whether anything was found. None of these totals holds an account, a network address, a cookie or any other identifier, so no total can be traced back to a person, and nothing is stored in your browser for it. Search words and the names of other websites are deleted after 90 days. Words containing a long number or an email address are never stored, and administrators see a word only once at least three searches used it.

Why we are allowed to hold it

Under the GDPR each of these has a lawful basis, and none of them is consent — asking permission to store the account you deliberately created would be theatre.

• To run the service you asked for: your account, your listings, your messages. Without them there is nothing to use.
• Our legitimate interest in keeping the marketplace usable: rate limits, spam screening, and the moderation record that stops a removed listing being posted again.
• Our legitimate interest in detecting and investigating fraud and illegal goods: the security log.
• Legal obligations, where one applies — for example a court or police order to hand data over.

What is encrypted

Your phone number, the body of every message and the text of every rating comment are encrypted with AES-256-GCM before being written to the database, each with its own random nonce. Somebody who obtained a copy of the database would hold ciphertext for those fields. Passwords are not encrypted at all — they are hashed with Argon2id, which is one-way, so nobody here can read your password, ourselves included.

What other people can see

Some of this is public by design, because a marketplace where nobody can be judged is a marketplace nobody should trust. Specifically:

• A listing is public. Search engines index it, and pasting the link into a chat app shows a preview. Anything you write in a description is public — including a phone number, if you put one there.
• A seller's profile shows their display name, town, the month they joined, and the ratings they have received.
• A rating never names the person who left it. It says “verified buyer”, which is the literal condition: only someone who messaged the seller about that listing can leave one. This is deliberate, so that nobody can walk the site and reconstruct who bought what from whom.
• Your email address and phone number are never shown to another user. Messages go through the site.

Who else gets it

No advertising network, no analytics service, no data broker, no social network. There is no tracking pixel on this site and no third-party script. The only outside parties involved are the company that runs the servers and the service that delivers verification emails, both acting on our instructions and only so far as that job needs. The police, a prosecutor or a court receive data only when they request it lawfully, or when we report a threat to someone's life or safety, and every such disclosure is recorded. The fonts are served from our own servers rather than from a font provider, so that loading a page does not tell anyone else you visited.

Cookies

There are no tracking cookies here, which is why you have not been shown a consent banner. The site sets a cookie to keep you signed in, one to carry a verification step between two pages, and one to remember your language. All three are necessary for the site to work as asked, and they are readable only by the server, not by JavaScript in your browser. Your choice of light or dark theme is kept in your browser and never sent to us.

How long we keep it

Your account and its contents stay until you delete them. When you delete your account the erasure happens immediately, not after a waiting period: your address, password and phone number are overwritten, your listings are withdrawn and their text removed, and the messages you sent are blanked. Two things deliberately survive. Ratings you left about other sellers stay, because they describe those sellers rather than you and already name nobody. The record that a listing was removed by a moderator stays, so that a removed listing cannot be brought back by opening a new account. The security log keeps each entry for 90 days, and longer only for an account an authority has asked us to preserve. Our web server's access log, which also holds network addresses, is deleted after 14 days.

Your rights

If you are in the EU or the EEA, the GDPR gives you the following, and this site implements the first three as buttons rather than as an address to write to:

• See and download everything held about you — the button is in your account, under Security.
• Correct anything wrong — in your account, under Account.
• Delete your account, permanently.
• Receive your data in a portable form: the download is a JSON file for exactly this reason.
• Object to processing based on legitimate interest, and ask us to restrict it.
• Complain to your national data protection authority if you think we have got this wrong.

Age

tregonomi.com is not for children. You need to be 16 or older to open an account. If we learn that an account belongs to someone younger, we delete it.

Changes to this notice

If this changes in a way that affects you, the date at the top changes and we say what changed. We do not quietly rewrite it.