Privacy Policy

Tibian Hub is a marketplace where players buy and sell virtual goods - in-game currency, accounts, and items - for Tibia-style online game servers, protected by an escrow payment flow.

This policy explains what personal data we collect, why we collect it, who processes it on our behalf, how long we keep it, and the choices you have. It applies to the website, your account, and every marketplace feature.

Account data: your email address, username, display name, and any avatar or profile banner you upload.

Seller verification data: to sell on Tibian Hub you submit a government-issued identity document, which is reviewed by our moderation team. These documents are stored in private storage, are never publicly accessible, and are permanently deleted when your account is deleted.

Transaction data: orders and their amounts, statuses and timestamps, order chat messages between buyer and seller, delivery proof files (screenshots or videos) uploaded by sellers, disputes and their outcomes, and reviews.

Payment data: payments are processed by Stripe. We never receive or store your full card number. Sellers connect a Stripe account for payouts; we store only the account reference, not its financial contents.

Technical data: IP address, device and browser metadata, and server logs used for security, fraud prevention, and reliability.

To operate the marketplace: creating listings, processing escrow-protected orders, releasing payments after confirmed delivery, and running the automatic release and refund timers.

To keep trades safe: verifying sellers, reviewing delivery proofs and order chats when a dispute is opened, and detecting fraud or abuse.

To communicate with you: transactional emails (order confirmations, delivery reminders, dispute updates) and in-app notifications about your orders and listings.

To provide optional paid features: managing Premium subscriptions and providing sellers with analytics computed from their own trading history.

Your trader profile is public: username, avatar, optional banner, membership date, trader badges, completed-trade count, ratings, and the reviews buyers have left about you. Listings you publish are also public.

Your email address, identity documents, payment details, order history, and private messages are never public. Order details, chat messages, and delivery proofs are visible only to the other party in that order and to our moderation team.

We do not sell personal data. We share it only with the service providers that run the platform: Supabase (database, authentication, file storage), Stripe (payments, escrow, subscriptions, seller payouts), Vercel (hosting), Upstash (caching), and Resend (transactional email). Each processes data under its own privacy terms.

The Tibia Streamers page displays publicly available Twitch stream information; we send Twitch no personal data about you.

We may disclose data when legally required, or where necessary to prevent fraud or resolve a payment dispute (for example providing order evidence to Stripe during a chargeback).

You can delete your account from Settings. Deletion starts a 30-day grace period: your listings close immediately, and logging in again within 30 days cancels the request.

After 30 days your identity is permanently removed: your login is disabled, your username is replaced with an anonymous identifier (e.g. DeletedUser1a2b3c4d), and your identity documents, avatar, and banner are permanently deleted. Any Premium subscription is cancelled.

Transaction records, reviews, order messages, and delivery proofs are retained in anonymized form. This retention is required for bookkeeping obligations (up to 7 years), for the defense of legal claims and payment disputes, and to keep the marketplace's review system truthful for other users. Deletion is postponed while you have an unresolved order, and completes automatically once it resolves.

If a specific message or review text contains personal information you want removed, contact Support@tibianhub.com and we will assess and honor justified requests individually.

You may access and correct your profile data directly in Settings, and exercise deletion as described above. Depending on your jurisdiction you may also have rights to data portability, restriction, and objection.

To exercise any of these rights, or to ask questions about this policy, contact Support@tibianhub.com. Deletion requests made by email receive the same treatment as the in-app flow.

Data is encrypted in transit, access to private files (identity documents, delivery proofs) is restricted by per-user access rules and time-limited links, and administrative access is limited to verified staff.

No internet service can guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify affected users and authorities as required by law.

We may update this policy as the product evolves. The date above reflects the latest revision, and material changes will be highlighted on the platform. Continued use after an update means you accept the revised policy.