Last updated 30 September 2026

Privacy Policy

This policy explains how Tradetopia handles information when you browse the market site or create an account.

Information we handle

The public market includes item names, advertised prices, world names, seller display names, channel names, and message text obtained from the market-data service. If you create an account, we store your username, email address, a one-way password hash, verification status, plan and role, session records, and security-event timestamps. Passwords and login-cookie values are never stored in plain text.

How information is used

We use this information to operate search and price pages, authenticate accounts, send verification and password-recovery messages, prevent abuse, diagnose failures, and protect the service. We do not sell personal information.

Cookies and external services

Account sessions use essential, first-party cookies. Your watchlist and baskets, including quantities, notes and acquired-item status, are stored with your account across devices. Recently viewed items and list navigation preferences are stored in your browser. Older browser-only watchlists can be imported into your account when you choose. Transactional account email is delivered through Resend. Item-image requests are made directly by your browser to Growtopia Wiki when an image enters the visible page area; that service receives the normal network information associated with a web request.

We use Cloudflare Web Analytics to measure page visits and website performance. Reports include pages viewed, referring websites, browser and device types, and country. This analytics service does not use cookies, and we do not link its measurements to your Tradetopia account.

Retention and deletion

If you connect Discord for price alerts, we store your Discord user ID and display name to send price-alert DMs through Discord. We do not retain Discord OAuth access or refresh tokens. Saved alerts include your chosen item and target price, observed source identifiers, and delivery history. Disconnecting removes your Discord connection and pauses alerts. Deleting an alert removes its observation and delivery history; deleting your account removes all alerts and the Discord connection. We also keep a history of alert items, target prices, and setting changes for administrator support and analysis of item interest. This setting history remains when you delete an individual alert and is removed when you delete your account.

The optional Ad manager stores a separate Discord connection: your account token is encrypted on the server so the sending service can post your scheduled ads. The encryption key is kept separately from the account database. The service decrypts the token when communicating with Discord, including checking channel limits and recent messages for cooldowns. We also retain your selling items, prices, worlds, custom messages, channel settings, and up to 100 delivery activity records. Recent channel message contents are not retained by the Ad manager. Disconnecting removes the saved token and pauses sending; drafts and cooldowns remain. You can remove drafts or clear delivery activity in the Ad manager. Deleting your Tradetopia account removes its saved token, drafts, schedules, and delivery activity.

For administrator support and analysis of Ad Manager usage and asking prices, we also retain a history of item names, entered prices and units, stock, worlds, channels, and draft changes, along with delivery times and outcomes. Existing drafts and available delivery activity form a starting snapshot when this history begins. These analytical records remain when you remove a draft or clear recent delivery activity and are removed when you delete your account. This history does not copy Discord tokens or custom message contents. Asking prices and draft changes do not confirm completed sales.

Account data is retained while the account remains active. Expired sessions and one-time credentials are removed during normal account activity. You can permanently delete your account from the Security page after confirming your password. Deletion removes the user record, watchlist, baskets, sessions, and one-time credentials; security-event records may remain without an account identifier.

Administrators can also permanently delete another account after resolving open payment tickets. Management audit records remain, including the account ID, username, access changes and deletion reason. Support correspondence is retained; queued deliveries to a deleted account stop, although messages already starting to send may still arrive.

Pro purchases

We store purchase amounts, membership dates, the connected Discord identity, ticket references, and staff confirmation history to fulfil purchases and resolve payment questions. Purchase records are removed with your account after open tickets are resolved. Receipts and conversations in Discord are separate copies; contact server staff about their removal. Seller licence records are held separately under the seller’s Discord identity.

Security and choices

Tradetopia uses password hashing, HTTPS deployment controls, CSRF protection, secure cookie options, rate limits, and restrictive browser security headers. No service can guarantee absolute security. You may use the public market without creating an account and can manage saved items on the Watchlist page or clear older local saves and recently viewed items through your browser.

ChatGPT integration

If you use the Tradetopia plugin in ChatGPT, Tradetopia receives the tool arguments sent for your request, such as item names, quantities, budgets and planning assumptions. Public tools use market data and permitted calculations. If you choose to connect your account, a Tradetopia consent page lists the access requested. Depending on the permissions you approve, tools can read your account's feature access, baskets, purchases, watchlist, quests, price alerts, inbox and advertising status, and save confirmed changes to private planning records and alerts. Do not enter passwords or credentials into a plugin request.

A planning result may include a review link carrying the inputs you supplied, including owned quantities or quest progress. Share these links only intentionally. Opening one does not save anything: Tradetopia refreshes the estimate and requires website sign-in and your confirmation before saving supplies to a private basket. Linked tools can also save reviewed changes in chat and read back the result. Linking does not authorize purchases, public messages, account-security changes or staff management.

Results are returned to ChatGPT to answer your question. OpenAI handles your conversation under its own policies and your account settings. The integration does not store a conversation history; ordinary service and infrastructure logs may record request metadata. Public listing results exclude message bodies and posting-account identifiers. Private results you request are shared with ChatGPT. OAuth access credentials expire after 15 minutes; a connection can renew them for up to 30 days before consent is needed again. Tradetopia stores hashed credentials and consent records, not plaintext tokens. Disconnect under Connected assistants to stop access; this retains your saved plans and alerts. Deleting your account removes its connections.

Contact

For privacy questions or account-data requests, email [email protected].