This is a starting template, not legal advice. Review it against the Personal Data Protection Act 2010 before operating commercially.
What we collect
- Your email address, to sign you in. It is never shown to other members and never sold.
- Your profile — username, display name, bio, city and state. This is public by design, because buyers need to know roughly where you are before agreeing to meet.
- Your collection — what you own, its condition, what you paid, your notes. Purchase prices and notes are always private. The rest is private unless you switch on a public collection in settings.
- Listings, orders and messages, so both sides of a deal have the same record of it.
- Delivery addresses you give when arranging courier COD. Visible only to the one seller you gave it to.
Photos
Every uploaded image is re-encoded on our server before it is stored. That strips EXIF metadata, which on a phone photo routinely includes the GPS coordinates of where it was taken — usually your home. We do this whether or not you asked.
How purchase prices are used
What you paid feeds the valuation engine, but only in aggregate and only for castings where no completed sales exist yet. Nobody can see an individual member’s purchase price, including us, in any part of the interface.
What we do not do
No advertising networks, no third-party analytics trackers, no selling data. Castbase runs on its own infrastructure with its own database.
Your rights
You can edit or delete your collection items and listings at any time. Completed sales remain in the market data in anonymised form — the price and date survive, your identity does not — because removing them would corrupt valuations other members rely on. To request deletion of your account, contact support.
Retention
Sessions expire after 30 days of inactivity. Sign-in links expire after 30 minutes and work once.