Privacy Policy

1. Data We Collect

We collect the following data when you use .ctx:

• Account data -- Name, email address, and profile image from your GitHub account via OAuth.
• Transaction data -- Purchase history, amounts paid, and payment method details (processed by Stripe).
• Creator data -- Display name, bio, Stripe account information for payment processing.
• Usage data -- IP address, browser user agent, and session information for security purposes.

2. How We Use Your Data

• To provide and maintain the marketplace platform
• To process payments and manage transactions
• To authenticate your identity and secure your account
• To communicate important service updates
• To detect and prevent fraud or abuse

3. Third-Party Services

We share data with the following third-party services:

• Stripe -- Payment processing. Stripe collects and processes payment information under their own privacy policy.
• Cloudflare R2 -- File storage for product files.
• GitHub -- Authentication via OAuth.

4. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Port your data to another service
• Object to processing of your data
• Restrict processing of your data

To exercise any of these rights, contact us at privacy@dotctx.dev.

5. Data Retention

We retain your data for as long as your account is active. Transaction records are kept for 7 years for legal and tax compliance. You may request account deletion at any time.

6. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

7. Security

We implement industry-standard security measures including encrypted connections (TLS), secure session management, and regular security reviews. Payment data is handled entirely by Stripe and never stored on our servers.

8. Contact

For privacy-related inquiries, contact us at privacy@dotctx.dev.