DONUT MARKET

Privacy

Last updated: May 5, 2026

1. What we collect

To run a marketplace with guarantor-mediated escrow we collect the minimum needed:

  • Email — for authentication and account recovery.
  • Password hash — stored only as a one-way bcrypt hash. Plain-text passwords are never written to the database.
  • Display name — your public name on Donut Market.
  • Minecraft nickname — required for the in-game half of every trade and for guarantor escrow transfers.
  • Listing history — all your listings, their statuses and meta (category, brief, attached imgbb images).
  • Trade history — every deal, status transition, chat message (including imgbb links), reviews and ratings you participate in.
  • Reviews and rating — what other players write about you as buyer and seller.
  • IP address and basic request metadata — for fraud prevention and rate-limiting. Stored short-term.
  • Audit log — administrator actions and key deal-state transitions, for accountability.

2. What we do NOT collect

  • Your real name, address, phone number, or government ID (no KYC).
  • Payment card data, bank details, or crypto wallets — there are no fiat or crypto operations on the Platform. All settlement is done in DonutSMP $ via the guarantor.
  • The contents of your Minecraft account, inventory, or base coordinates.
  • Browser fingerprints or third-party analytics trackers.

3. How we use your information

  • To run listings, deals, chat, guarantor escrow, and disputes.
  • To authenticate you (email + password).
  • To detect and prevent fraud — multi-accounts, review manipulation, attempts to move trades off-platform, breaches of DonutSMP rules.
  • To respond to support requests and resolve disputes.
  • To improve the Service (aggregated, non-identifying analysis).

4. Public information

Some information is intentionally public:

  • Your display name, avatar, and bio are visible to everyone.
  • Your Minecraft nickname is visible to your trade counterparty (the guarantor needs it to receive your payment or deliver $).
  • Your aggregated rating as buyer and as seller, the count of completed deals, and your reviews are public on your profile page.
  • Stats for disputes you opened as a buyer (in progress / won / lost) are shown on your profile.
  • Your active listings appear on your profile page and in the catalog.

Your email, IP, and password hash are never shown to other users.

Minecraft nicknames are never published outside the platform. We do not share, sell, syndicate, or otherwise expose your Minecraft nickname to third parties, search engines, advertising networks, or external statistics. On the platform itself, your nickname is only visible to your trade counterparties and on your profile page. If you prefer not to display your deal count, rating, or reviews, you can hide them at any time via /settings.

5. Images hosted on imgbb

All images on Donut Market (listing screenshots, portfolios, chat checkpoints, dispute evidence) are hosted on imgbb.com. We do not host the images ourselves — we only store the URL. Imgbb has its own privacy policy; keep in mind that any image uploaded to imgbb is effectively public via its direct link.

6. Storage and security

We apply industry-standard data-protection practices. However, no online system is fully secure. We do not guarantee absolute protection from data breaches, advanced or targeted attacks, third-party compromise, or other incidents that could expose stored information. By using the Service, you accept this risk.

7. Third parties

  • imgbb.com — external image host for all images in listings, chat, reviews, and disputes. Subject to their privacy policy.
  • DonutSMP / the verified guarantor — to perform the in-game half of a deal, the guarantor sees your Minecraft nickname and the transfer amount. The guarantor never receives your platform email or password.
  • Email provider (transactional email for password reset and alerts) — receives your email when sending a message. We do not sell email lists.
  • We do not sell your data to any third party.

8. Your rights

  • Correction: change your email, display name, Minecraft nickname, or bio via your profile / settings.
  • Privacy controls: hide your deal count, rating, and reviews from your public profile via /settings.
  • Deletion: request account deletion. Trade and audit records are retained in anonymized form for legal and anti-fraud reasons (no personal identifier remains).
  • Settle deals before deletion: close out any active deals (or escalate them to an administrator via dispute) before deleting your account. Active deals on a deleted account cannot be continued.
  • Opt out: stop using the Service.

9. Cookies

We use only functional cookies:

  • donut_session — your authenticated session (HttpOnly, JWT-signed).
  • donut_locale — your selected interface language.

No tracking, advertising, or third-party analytics cookies.

10. Changes

Material changes to this Privacy Policy will be communicated via the Service. Continued use after a change constitutes acceptance of the updated version.

11. Contact

Privacy questions, data export requests, or deletion requests: contact us via the official Discord channel listed in your profile. We respond within 30 days.

← Donut Market