What we hold about you

1What we collect

Your account. A display name, and whichever sign-in methods you set up: a username and a hashed password, a linked Discord account, or both. Passwords are stored as a scrypt hash — we cannot read yours, and neither can anyone who steals the database.

An email address, if you give one. Used to reset your password and, if you turn it on, to tell you when a deal needs you. You can remove it whenever you like, as long as you still have another way to sign in.

Your deals. What was traded, the price, the terms, any notes either side added, the crypto addresses used, and the transaction hashes. Together with a timestamped record of every action taken on the deal.

Your reputation. Vouches other traders leave, and the deals they relate to.

Your IP address, briefly. Kept against failed sign-ins and password reset requests, to stop someone guessing their way into accounts. Nothing else uses it, and it is discarded once its window has passed.

There is no tracking, no advertising, no third-party analytics, and no cookie banner — because the only cookie set is the one that keeps you signed in.

2Why we are allowed to hold it

Almost all of it because we cannot run the service without it: you cannot have an escrow service that does not record who agreed to what. Keeping the audit trail after a deal closes is a legitimate interest — being able to answer a question about a resolved deal, and to defend a ruling if it is challenged. Email alerts are on your consent, and you can withdraw it in your account settings.

3Who else sees it

The person you are trading with sees your display name, your reputation, and everything on the deal you share — including the addresses and notes on it. Do not put anything in a deal note you would not want them to keep.

Anyone can see your display name and your public reputation if they have your profile link. Nobody can see your deals unless they are on them.

We see everything, and read the record of a deal when someone disputes it.

Two suppliers handle things on our behalf: an email provider, which receives your address and the text of any message we send you, and a blockchain data provider, which receives the deposit addresses we are watching — public information that is on the chain regardless. Neither is given anything else, and neither may use it for their own purposes.

We do not sell anything to anyone, and there is nobody to sell it to.

4How long we keep it

• Your account: until you delete it, or after 3 years without signing in.
• The record of a closed deal: 6 years. It is an append-only record and we do not edit it — including at your request, since it is also the other party’s record of the same trade.
• IP addresses: at most a few hours, and only while a rate-limit window is open.
• Password reset and confirmation links: the hash only, discarded within a week of the link expiring.

5What you can ask for

A copy of what we hold, a correction, deletion, or a machine-readable export. Email support@haspmm.com and we will answer within a month.

Deleting your account removes your profile and detaches your name from your deals. The deals themselves remain, because the other party has the same right to their record of a trade as you do to yours — that is what makes the record worth anything.

If you think we have handled your data badly, tell us first; if that goes nowhere, you can complain to the data protection authority where you live.

6Keeping it safe

Passwords are hashed with scrypt. Reset and confirmation links are stored only as a hash, so a stolen database contains no usable links. Sign-in attempts are rate limited. Changing your password signs out every other session, including anyone else’s.

None of which is a promise that nothing will ever go wrong. If something does, we will tell the people affected and say what happened.

7Contact

[TO BE SET], [TO BE SET].

support@haspmm.com · see also the terms and the dispute rules.