Privacy Policy
Effective 2026-10-01
What we collect
- Account details: your email address, a salted hash of your password, your account type and when you accepted our terms.
- Conversations: messages you exchange with sellers or shoppers on Shoppage.
- Orders: when you buy from a shop, that shop keeps your name, email, phone number, delivery address, what you ordered and how you chose to pay. You can check out as a guest, without an account.
- Appointments: when you book a service, the shop keeps your name, contact details, the time you picked and any note you leave.
- Seller customer records: when you message a shop, that shop keeps a customer record with your email so it can serve you. Deleting your account anonymises these records.
- Saved items: products you save. Sellers see how many people saved a product, but not who, unless you're already their customer.
- Shop and product details that sellers publish, and what a shop adds to run itself: its team's email addresses and roles, its payment gateway credentials (encrypted, never shown again) and the webhook endpoints it subscribes.
- Search activity: search terms, stored without who searched, to power suggestions. Old terms are deleted on a schedule.
- Shop traffic: product views and “Visit seller” clicks, counted with an identifier that changes every day, so we can't follow you over time. We don't store IP addresses with them.
- Security records: for signed-in sessions we keep the IP address and browser name until the session ends, to help you spot unfamiliar sign-ins.
Cookies
We use only the cookies needed to run the site: sp_sid keeps you signed in and holds your cart, sp_csrf protects forms against cross-site attacks, sp_flash shows one-time messages, and sp_theme remembers a light or dark theme if you pick one. We don't use advertising or third-party tracking cookies.
Services we rely on
Search results come from public sources (such as Wikipedia, Wikimedia Commons, the Internet Archive, OpenStreetMap and news publishers). Your searches are sent to them without your account details. Maps load tiles from the configured map server, which receives your IP address like any web request.
Your choices
You can download everything we hold about you — your profile, conversations, saved items, API keys, orders and appointments — or delete your account, from Your data. Deleting an account removes your profile, and the shops you dealt with keep their own records of the orders and appointments they took, because they need them to trade and to honour them. Sellers can ask us to close their account.
Contact
Contact the Shoppage team with any privacy question.