Privacy Policy

Information you give us

• Account details: username, email address and password. Passwords are stored only as a secure hash.
• Profile details you choose to add: profile picture, banner, bio, Roblox username and Discord username.
• What you post and send: listings and photos, chat messages, vouches, reports, Hall of Shame submissions and evidence, comments and support tickets.
• Trade records: what was traded, amounts, and the status of each trade.

Information collected automatically

• Your IP address and browser details, used to count unique listing views, limit abuse (such as spam and repeated login attempts) and keep accounts secure.
• Activity such as when you were last active, failed login attempts and which listings you viewed.
• Anonymous usage and performance data that helps us see which pages are slow or broken.

Payments

When you buy a plan or boost, PayMongo or PayPal handles your payment details. We receive and store a payment reference, the amount and its status. We never see or store your card number or e-wallet login.

Payments for trades between users (for example by GCash) happen outside RbMarket, so we don't receive those payment details unless you share them in chat or a report.

• To run your account and the marketplace: showing listings, delivering messages and recording trades.
• To build trust: displaying vouches and publishing reviewed Hall of Shame reports.
• To keep RbMarket safe: detecting scams, fake vouches, spam and account takeovers, and enforcing our terms.
• To send account emails, such as verification codes, password resets and important notices.
• To send optional updates and the market digest, only if you turn them on in Settings.
• To understand how the site is used so we can fix problems and improve it.

RbMarket is a public marketplace, so some information is visible to everyone:

• Your username, profile picture, banner, bio, join date, listings, vouches and trade count.
• Your email and Roblox profile only if you turn those on under Settings › Privacy.

Chat messages are visible to the people in the conversation. Moderators may review messages when investigating reports, disputes or suspected scams.

Published Hall of Shame reports show the reported usernames, payment details (such as GCash numbers) and evidence submitted by the reporter, after moderator review. If you are named in a report and believe it is wrong, see your rights below.

We don't sell your personal information. We share it only with service providers that help us run RbMarket:

Some of these providers process data outside the Philippines, including in Japan and the United States. We use providers that protect personal data with appropriate safeguards.

We may also disclose information when the law requires it, to respond to valid legal requests, or to protect users from fraud or harm.

We use a cookie to keep you logged in, and your browser's local storage to remember small preferences. Our analytics don't use advertising cookies, and we don't show third-party ads.

We keep your information while your account is open. Trade records, reports and related messages may be kept longer when needed to resolve disputes, prevent fraud, or meet legal obligations.

When you delete your account, we remove or anonymize your personal information within a reasonable time, except records we need to keep for safety or legal reasons. Vouches you left for others may remain without your name.

Under the Philippine Data Privacy Act of 2012, you have the right to be informed about how your data is used, and to access, correct, object to the processing of, and request deletion of your personal information. You can also ask for a copy of your data.

• You can edit most profile details yourself in Settings.
• For anything else, including deleting your account or disputing a Hall of Shame report, email support@rbmarket.app from the address on your account. We will reply within 15 days.
• If you think we have mishandled your data, you can complain to the National Privacy Commission of the Philippines.

We protect your information with encrypted connections (HTTPS), hashed passwords, access controls and rate limits on sensitive actions. No system is perfectly secure, so use a strong, unique password and never share your login. If we learn of a breach that affects you, we will notify you and the authorities as the law requires.

RbMarket is not meant for children under 13. Users aged 13 to 17 need permission from a parent or guardian, as described in our Terms of Service. If you believe a child under 13 has an account, email support@rbmarket.app and we will remove it.

We will update this policy when our practices change and change the date at the top. If a change is significant, we will tell you on the site or by email.

Questions or requests about your privacy? Email support@rbmarket.app.