Privacy Policy

This Privacy Policy explains what personal data the ColleX platform (“we”, the “Platform”, available at collexstash.com) collects, for what purpose and on what legal basis we process it, and what rights you have over your data. Processing follows the Ukrainian Personal Data Protection Act and, where applicable, the EU General Data Protection Regulation (GDPR).

By using the Platform you confirm that you have read this Policy.

The data controller is the owner of the ColleX platform. For any question about how your data is processed, write to collexstash@gmail.com.

• Account data: email address (used to log in), name or nickname.
• Profile data: city, short bio, contacts for trades — Telegram, Instagram, phone number (all optional).
• Collection data: your inventory (“Have” / “Want” marks), market listings and trade history.
• Technical data: IP address, device and browser type, analytics cookies (see section 6).

Your contact details (Telegram, Instagram, phone) become visible to another person only after you accept a trade request from them, or if you make your profile public yourself.

• Providing the service (sign-up, collection tracking, trades) — performance of a contract (the Terms of Use).
• Connecting collectors for a trade — your consent; you choose which contacts to publish.
• Analytics and improving the Platform — your consent to cookies.
• Security (abuse prevention, rate limiting) — our legitimate interest.

We do not sell your personal data. To run the Platform we rely on processors that handle data on our instructions:

• Supabase — database, authentication and image storage.
• Vercel — hosting.
• Google Analytics — anonymised traffic statistics (only with your cookie consent).
• Sentry — technical error monitoring.
• Upstash — rate limiting (abuse protection).

We use cookies. Strictly necessary cookies are required to log in and to run the site. Analytics cookies (Google Analytics) are set only after you press “Accept” in the consent banner. You may decline them — the Platform works exactly the same.

• to know that your data is collected and why;
• to access your data within 30 calendar days;
• to have inaccurate data corrected;
• to delete your account and everything linked to it — in profile settings (“Account → Delete account”) or by writing to us;
• to withdraw consent to processing or to cookies;
• to lodge a complaint with the competent supervisory authority.

To exercise any of these rights, write to collexstash@gmail.com.

We keep your data for as long as your account exists. Once the account is deleted the data is removed irreversibly, except where the law requires us to keep it. We apply technical and organisational safeguards: encrypted connections (HTTPS), access separation and database-level controls.

We may update this Policy. The current version is always on this page with the date of the last update. We will announce material changes on the Platform itself.