Last updated: June 30, 2026
This policy explains what data we collect, why, and the choices you have. We keep data collection to the minimum needed to run the service.
We share data only with the processors needed to run the service: our payment providers (to take payment), our cloud/storage and email providers, and analytics where you've consented. We do not sell your personal data. We may disclose data if required by law.
Card payments are processed by iyzico and crypto payments by Cryptomus. When you pay, you interact with their hosted pages and their privacy terms also apply. We only receive the result of the transaction (success/failure and a reference), never your full card details.
We keep account and order data for as long as your account exists and as required for legal, tax and accounting purposes. You can ask us to delete your account; some records may be retained where the law requires.
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, email privacy@gpl.market.
Questions about privacy? Email privacy@gpl.market or support@gpl.market.