Privacy Policy.

1. Controller

The controller of your personal data is the operator of Specksy, (being completed), IČO (being completed). Contact: support@specksy.xyz.

We have not appointed a Data Protection Officer, as we are not required to. For any question about your data, write to support@specksy.xyz with "Privacy" in the subject.

2. What we process, why, and on what legal basis

• Account (e-mail, username, display name, profile, settings) — to provide your account (Art. 6(1)(b) GDPR, contract).
• Orders, payments and wallet addresses, deliveries, messages and support cases — to perform your purchases and sales (Art. 6(1)(b)).
• Invoices, accounting and VAT records, including your billing country and the country of your IP address as evidence of where you are — to meet our tax and accounting obligations (Art. 6(1)(c), legal obligation).
• Seller identification and income data (name, address, tax number, VAT number, date of birth where needed, payouts) — to report to the tax authority under the DAC7 rules (Art. 6(1)(c)).
• Security logs, rate limits and fraud checks — to protect Specksy and its users (Art. 6(1)(f), legitimate interest).
• Transactional e-mails (orders, payments, security) — Art. 6(1)(b); optional notification e-mails, which you can switch off in Settings or with the link in each e-mail — Art. 6(1)(f).
• Reports and moderation decisions — to keep the marketplace lawful and safe (Art. 6(1)(c) and (f)).

You must give us the data needed to create an account and to buy or sell; without it we cannot provide the service. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

3. What is public

Your username, display name, avatar, bio, seller profile, published listings and reviews are visible to everyone. Your e-mail address is not. Payments and payouts are recorded on the public Ronin blockchain together with the wallet addresses involved; blockchain records are permanent and cannot be deleted by us or anyone else.

4. Who receives your data

We use these service providers, who process data on our behalf and only on our instructions:

• Lovable (Lovable Labs Incorporated) — application hosting and platform, including sending our e-mails.
• Supabase — database, authentication and file storage.
• Moralis — notifications about blockchain transfers to our addresses (wallet addresses, transaction data).
• Alchemy — access to the Ronin blockchain (wallet addresses, transaction data).
• Telegram — internal alerts to our administrators; these contain only short reference numbers, never your name, e-mail or messages.

The European Commission's VIES service is used to check VAT numbers. We share data with authorities where the law requires it, for example the tax authority. Some providers are based outside the EEA; transfers are made on the basis of an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses.

5. How long we keep it

• Account data: while your account exists. When you close it, your profile is removed; data we must keep for legal reasons is kept separately and only for that purpose.
• Invoices, accounting and VAT records, including tax evidence: 10 years.
• DAC7 seller data: 10 years after the year it relates to.
• Orders, messages and support cases: as long as needed to handle claims, normally up to 4 years after the order, unless they form part of accounting records.
• Security logs and rate-limit records: up to 12 months.

6. Cookies and local storage

Specksy does not use analytics, advertising or other non-essential cookies. We only store what the site needs to work in your browser's local storage — for example that you are signed in and the billing country you chose — so no cookie consent is required.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent you may withdraw it at any time. You can download a copy of your data and close your account in Settings, or write to support@specksy.xyz.

You also have the right to lodge a complaint with a supervisory authority; in Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava.