Privacy Policy

Last updated: February 2026

1. Data We Collect

We collect the following information:

  • Account data: Username, email address, password (hashed)
  • Profile data: Name, bio, location, avatar (optional)
  • Transaction data: Purchase history, sale history, Bitcoin wallet addresses
  • Usage data: Pages visited, search queries, IP address, browser type
  • Communication data: Dispute messages, contact form submissions

2. How We Use Your Data

  • Provide and maintain the Platform
  • Process transactions and payouts
  • Send transactional emails (order confirmations, security alerts)
  • Resolve disputes between buyers and sellers
  • Improve Platform features and user experience
  • Prevent fraud and abuse

3. Cookies

We use essential cookies for:

  • Session management: Keeping you logged in
  • CSRF protection: Preventing cross-site request forgery
  • Analytics: Google Analytics to understand usage patterns

4. Third-Party Services

  • BTCPay Server: Processes Bitcoin payments. BTCPay is self-hosted and does not share payment data with third parties.
  • Google Analytics: Collects anonymized usage statistics.
  • Sentry: Error tracking to improve Platform stability.

5. Data Sharing

We do not sell your personal data. We may share data only:

  • With sellers (limited buyer info for order fulfillment)
  • When required by law or legal process
  • To protect CheatBay's rights and safety

6. GDPR Rights (EU Users)

If you are in the European Economic Area, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability — receive your data in a structured format
  • Object to processing based on legitimate interests

To exercise these rights, contact us at our contact page.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, we may retain transaction records for up to 5 years for legal and financial compliance.

8. Security

We use industry-standard security measures including HTTPS, hashed passwords, and secure session management. However, no system is 100% secure.

9. Changes

We may update this policy. Significant changes will be communicated via email or Platform notification.