Privacy Policy

Effective Date: January 1, 2025  ·  Jurisdiction: State of [Your State], United States

1. Information We Collect

We collect only the information necessary to provide the Service:

  • Account information: Username, email address (encrypted at rest), and password (hashed — never stored in plain text)
  • Usage data: Pages visited, features used, general session activity (no cross-site tracking)
  • Technical data: IP address (used for security and geographic verification), browser type, device type
  • Legal consent records: Timestamp and IP address of consent given at registration, as required for legal compliance

2. How We Use Your Information

We use your information solely to:

  • Provide, maintain, and improve the Service
  • Send transactional emails (account verification, password resets) — no marketing without explicit consent
  • Detect and prevent fraud, abuse, and unauthorized access
  • Comply with legal obligations

3. What We Do Not Do

  • We do not sell your personal information to third parties
  • We do not use third-party advertising networks
  • We do not scan your content for advertising purposes
  • We do not share your data with data brokers

4. Data Storage and Security

Your data is stored on servers located in the United States. Email addresses are encrypted using AES-256-GCM. Passwords are hashed using bcrypt. We use industry-standard security measures including HTTPS, secure session management, and rate limiting to protect your information.

5. Analytics

Ceres Bazaar uses self-hosted, privacy-friendly analytics that do not use cookies, do not track users across sites, and do not share data with third parties. We collect only aggregate, anonymous page view data to understand how the Service is used.

6. IP Geolocation

We use IP address data to verify that users are located in the United States, as required by our Terms of Service. This service is provided by IP2Location LITE. IP address data is not sold or shared.

7. Cookies

We use only essential cookies required for the Service to function:

  • Session cookie: Keeps you logged in during your visit. Expires after 15 minutes of inactivity.
  • We do not use advertising cookies, tracking cookies, or third-party cookies.

8. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time via the account deletion page or by contacting us at contact@ceresbazaar.com.

9. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your account and data
  • Withdraw consent (note: withdrawal may prevent use of the Service)

To exercise these rights, contact us at contact@ceresbazaar.com.

10. Children's Privacy

The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately.

11. Changes to This Policy

We will notify registered users of material changes to this policy by email before they take effect.

12. Contact

Privacy questions or requests: contact@ceresbazaar.com