Last updated 5 September 2026

Privacy Policy

This policy explains how Tradetopia handles information when you browse the market site or create an account.

Information we handle

The public market includes item names, advertised prices, world names, seller display names, channel names, and message text obtained from the market-data service. If you create an account, we store your username, email address, a one-way password hash, verification status, plan and role, session records, and security-event timestamps. Passwords and login-cookie values are never stored in plain text.

How information is used

We use this information to operate search and price pages, authenticate accounts, send verification and password-recovery messages, prevent abuse, diagnose failures, and protect the service. We do not sell personal information.

Cookies and external services

Account sessions use essential, first-party cookies. Your watchlist is stored with your account so it is available across devices. Recently viewed items and list navigation preferences are stored in your browser. Older browser-only watchlists can be imported into your account when you choose. Transactional account email is delivered through Resend. Item-image requests are made directly by your browser to Growtopia Wiki when an image enters the visible page area; that service receives the normal network information associated with a web request.

Retention and deletion

If you connect Discord, we store your Discord user ID and display name to send price-alert DMs through Discord. We do not retain Discord OAuth access or refresh tokens. Saved alerts include your chosen item and target price, observed source identifiers, and delivery history. Disconnecting removes your Discord connection and pauses alerts. Deleting an alert removes its observation and delivery history; deleting your account removes all alerts and the Discord connection.

Account data is retained while the account remains active. Expired sessions and one-time credentials are removed during normal account activity. You can permanently delete your account from the Security page after confirming your password. Deletion removes the user record, watchlist, sessions, and one-time credentials; security-event records may remain without an account identifier.

Security and choices

Tradetopia uses password hashing, HTTPS deployment controls, CSRF protection, secure cookie options, rate limits, and restrictive browser security headers. No service can guarantee absolute security. You may use the public market without creating an account and can manage saved items on the Watchlist page or clear older local saves and recently viewed items through your browser.

Contact

For privacy questions or account-data requests, email [email protected].