Privacy Policy
Last updated: 4 March 2026
The short version
Look, we get it. Nobody reads privacy policies. They're long, boring, and written by lawyers who get paid by the word. So here's the deal in plain English:
What we collect:
- Your identity address (derived from your words)
- Your display name (to show on your profile)
- The stuff you post (obviously)
- Messages you send (so they actually work)
- Basic usage data (to make the site better)
What we don't do:
- Sell your data. Ever. To anyone.
- Track you around the internet
- Build advertising profiles on you
- Share your info with marketers
- Keep data we don't need
That's the gist. The full version below has more detail, but no surprises.
Why our approach is different
Most platforms make money by collecting as much data about you as possible, then selling access to advertisers who want to target you. That's their whole business model.
We don't do that. bselr is a community-owned platform. We don't have advertisers to please or shareholders demanding "user engagement metrics." We just need enough data to make the platform work.
Our data philosophy:
- Collect only what we need. If we don't need it to run the platform, we don't ask for it.
- Delete what we don't. Expired listings, old logs, inactive accounts — it all gets cleaned up.
- No hidden tracking. No Facebook pixel, no ad networks. Google Analytics counts which pages people visit; it never sees what you type, and nothing builds a profile on you.
- You own your data. Download it, delete it, take it somewhere else. It's yours.
What we actually collect
Account information
When you log in, we store some basics to make it work:
| Data | Why we need it | Required? |
|---|---|---|
| Ethereum address | Your unique identity, derived from your secret words. We never see the words themselves. | Yes |
| Display name | Show on your listings and profile so people know who they're dealing with | No |
| Location | General area (suburb/city) so your listings show up in local searches. We never store your exact address. | No |
Listing information
When you post something for sale, we store the title, description, price, category, photos, location, and timestamps.
Messages
When you message another user, we store the conversation so you can both see it. Messages are only visible to the people in the conversation — we don't read them unless someone reports an issue.
Technical stuff we collect automatically
Like basically every website, we collect some technical information when you visit:
- IP addressFor security (detecting attacks, preventing fraud). Deleted from logs after 90 days.
- Device infoBrowser type, operating system, screen size. Helps us make sure the site works on your device.
- Pages visitedBasic analytics so we know which parts of the site people use. No tracking across other sites.
What we definitely don't collect
- Payment card numbers
- Bank account details
- Government ID numbers
- Tax file numbers
- Biometric data
- Health information
- Your contacts list
- Your precise GPS location
We don't handle payments, so we never see your financial details. That's between you and the buyer/seller.
What we do with your data
Simple: we use it to make the platform work. That's it.
Making the platform work
- Display your listings to potential buyers
- Let people message you about your stuff
- Send you notifications (if you want them)
- Show local results based on location
- Let you save searches and favourites
Keeping everyone safe
- Calculate trust scores
- Detect and block scammers
- Moderate reported content
- Prevent fraud and abuse
- Comply with legal requirements
Improving the platform
- Fix bugs and technical issues
- Understand what features people use
- Make the site faster and more reliable
- Develop new features the community wants
What we never do
- Sell your data to advertisers
- Build advertising profiles on you
- Share your info with marketers
- Track you across other websites
- Use your data to manipulate you
Who sees your data
Public (anyone can see)
- Your display name
- Your listings (title, photos, description, price, general location)
- When your account was created
- Your trust score
- Reviews from other users
Private (only you and us)
- Your Ethereum address (visible but pseudonymous)
- Your saved searches and favourites
- Your notification preferences
- Your full message history
Third parties
We do not sell your data. Period.
We may share limited data with:
- Infrastructure providers — Our hosting, database, and email services need some data to work. They're bound by contracts that prevent them from using your data for anything else.
- Law enforcement — If we're legally required to (court order, subpoena, etc.), we have to comply. We'll push back on overreaching requests and notify you if we can.
- Safety situations — If we believe there's a genuine threat to someone's safety, we may share information with relevant authorities.
Cookies
Yeah, we use cookies. But not the creepy tracking kind.
What we use cookies for:
- Session cookies — Keep you logged in so you don't have to sign in on every page.
- Preference cookies — Remember your settings (like your location preference).
- Security cookies — Help prevent cross-site attacks and fraud.
- Analytics cookies — Google Analytics counts visits and pages viewed. Off by default in the EU and UK until you agree.
What we don't use:
- Advertising cookies — No Facebook pixel, no advertising networks.
- Cross-site tracking — We don't follow you around the internet.
- Advertising cookies — We don't show ads, so we don't need them.
How long we keep your data
We don't hoard data forever. Here's our retention policy:
| Data type | How long | Why |
|---|---|---|
| Active account | Until you stop using it | You control when it goes |
| Active listings | Until you remove them | They're yours to manage |
| Expired/sold listings | 90 days | In case you want to relist |
| Messages | Until account is inactive | You might need them for disputes |
| Usage logs | 90 days | Debugging and security |
| Security logs | 1 year | Fraud investigation, legal |
Your rights
It's your data. You have rights over it.
Access your data
Want to know what we have on you? Contact us and we'll provide everything we've stored about you.
Fix incorrect data
If something's wrong, you can update most of it yourself. For anything else, reach out.
Delete your data
Want out? Let us know and we'll remove your data within 30 days. Some things (like messages in other people's conversations) may be anonymised rather than deleted.
Export your data
Taking your data somewhere else? Cool. We'll provide it in a standard format.
How we protect your data
We take security seriously:
- Encryption in transit — All data between you and our servers is encrypted (HTTPS everywhere).
- Encryption at rest — Your data is encrypted when stored in our database.
- Cryptographic identity — We never store your secret words. Your identity is verified through challenge-response signatures.
- Access controls — Only the systems and people that need access have it.
- Monitoring — We watch for suspicious activity and respond quickly to security issues.
No system is 100% secure — anyone who tells you otherwise is lying. But we do everything reasonable to protect your data.
Children
bselr is for adults (18+). We don't knowingly collect data from anyone under 18.
Australian Privacy Law
We're based in Australia and comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs).
If you're in the EU, we also respect GDPR principles — you have the same rights listed above.
If you have a privacy complaint, try contacting us first. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Changes to this policy
We might update this policy from time to time. When we do:
- We'll update the date at the top
- For significant changes, we'll post a notice on the site
- For major changes (like sharing data with new third parties), we'll notify you
If you keep using the platform after changes, you're agreeing to the new policy.
Questions about privacy? Check the Help section.