Privacy Policy

Data we collect

• Account data: your name, email address and country.
• Order data: products/memberships you buy, amounts, and payment status. We do not store card numbers — card data is handled entirely by our payment providers.
• Usage data: downloads, IP address and basic device/browser info, used for security, rate-limiting and fraud prevention.
• Cookies: a login session cookie and, with consent where required, analytics and advertising cookies (see Advertising & analytics).

How we use it

• To provide your account, downloads, memberships and order history.
• To process payments through iyzico (cards) and Cryptomus (crypto).
• To prevent abuse, fraud and excessive automated access.
• To send essential service emails (order confirmations, password resets). Marketing emails are sent only with your consent and you can unsubscribe at any time.

Sharing

We share personal data only with the parties needed to run the service and to reach our customers:

• our payment providers (iyzico, Cryptomus) to take payment;
• the cloud, storage and email providers that host the service and send our emails;
• analytics and advertising platforms — Google and Meta — where you have consented (see Advertising & analytics below).

We do notsell your personal data for money. Where the law — such as the California CPRA — treats sharing data with advertising platforms for cross-context personalised advertising as a “sale” or “share”, you can opt out at any time (see Advertising & analytics). We may disclose data if required by law.

Advertising & analytics

We use Google Analytics 4, Google Ads and Meta to measure how our marketing performs and to show relevant ads. This can involve:

• Cookies and similar identifiers set through Google Tag Manager, governed by Google Consent Mode. In the EEA and UK these stay off until you accept them in our cookie banner.
• Customer Match / Custom Audiences: we may share a hashed (irreversible) version of your email address with Google and Meta so we can show ads to our existing customers, exclude them from acquisition campaigns, or reach similar people. We never hand these platforms your raw email or your name and address for advertising — the email is hashed before it leaves us, and the platform uses it only to match against accounts it already has.

Your choices:

• decline analytics and advertising cookies in our cookie banner (in the EEA/UK they are off until you accept);
• ask us to remove you from advertising audiences at any time by emailing privacy@gpl.market;
• unsubscribe from marketing emails at any time.

Google’s and Meta’s own privacy policies also apply to the data they process.

Payments

Card payments are processed by iyzico and crypto payments by Cryptomus. When you pay, you interact with their hosted pages and their privacy terms also apply. We only receive the result of the transaction (success/failure and a reference), never your full card details.

Retention

We keep account and order data for as long as your account exists and as required for legal, tax and accounting purposes. You can ask us to delete your account; some records may be retained where the law requires.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, email privacy@gpl.market.

Contact

Questions about privacy? Email privacy@gpl.market or support@gpl.market.