Public where useful.
Private where personal.

The exchange, website and installed apps.

“The Trading Block”, “we” and “us” refer to the operator of The Trading Block marketplace project. This policy applies to thetradingblock.com.au, the iOS and Android applications, account authentication, marketplace APIs and support interactions.

The service is intended for people aged 18 and over. We do not knowingly create accounts for children.

Only what the product needs to operate and protect the exchange.

• Account information: email address, authentication provider identifiers, display name, handle, broad country or region and account preferences.
• Marketplace information: listings, seller-supplied photos, condition disclosures, wants, watches, offers, counters, deals and related timestamps.
• Social information: public profile content, follows, crew status, groups, reputation signals, presence choices and messages sent through the service.
• Operational information: session, device, security, abuse-prevention, error and performance records required to keep the service reliable.
• Optional analytics: privacy-limited product events only when you opt in. Messages, searches, item identifiers, handles, photos, payment details and precise location are excluded from that optional stream.

Do not put payment credentials, government identifiers, exact home addresses or other unnecessary sensitive information in public listings, profiles or messages.

To provide the exchange you ask for.

• Create and secure accounts, restore sessions and deliver one-time security emails.
• Publish listings and profiles according to your selected visibility settings.
• Build search, discovery, wanted and trade-match results.
• Deliver messages, notifications, offers, counters and deal state.
• Prevent fraud, spam, abuse and prohibited activity; investigate reports and preserve reviewable records.
• Maintain, debug and improve the service, including optional analytics where consent exists.
• Meet legal obligations and protect users, the public and the service.

We do not sell personal information or use private messages to build advertising profiles.

A public profile is not a public account file.

Your handle, display name, avatar, public listings, selected vault items and public reputation may be visible to other people. Email, authentication credentials, private storage objects, precise fulfilment details, account controls and non-public moderation records are not published as profile data.

Presence, activity, group and messaging visibility follow the controls available in the product. People you communicate or transact with will necessarily receive the content and trade details you choose to send them.

Specialists process limited data on our behalf.

Current infrastructure includes Supabase for authentication, database, realtime and private storage; Vercel for website and API hosting; Resend for account email delivery; and Apple or Google when you choose their sign-in method. Those providers process data under their own terms and privacy commitments.

We may also disclose information where lawfully required, to investigate abuse or safety risks, or as part of a genuine business reorganisation subject to appropriate safeguards.

Scoped access, private media and reviewable state.

We use access controls, row-level security, private storage, encrypted transport and limited server credentials. No internet service can guarantee absolute security, so use a protected email account and report suspicious activity promptly.

We retain information for as long as reasonably necessary to operate your account, maintain transaction and safety records, resolve disputes, prevent abuse and meet legal obligations. Retention can vary by record type. Deletion or correction requests may be limited where information must be kept for security, dispute or legal reasons.

Control participation without losing the context of past agreements.

You can change supported profile, social, presence and analytics settings in the app. You may request access, correction or deletion of personal information, object to certain processing, or ask a privacy question. Identity verification may be required before acting on an account request.

For privacy requests, contact ayrifikawa@gmail.com. Include only the minimum information needed to identify your account; never email a password or one-time code.

Australian operation with global infrastructure.

Service providers may process information outside your country. Where required, we use appropriate contractual and technical safeguards. Local privacy rights can vary by location.

We may update this policy when the product, providers or law changes. Material changes will be dated here and communicated through an appropriate service notice when required.

Read the Terms of Use →