Privacy policy
What Trokazo stores, where it is kept, and how you can remove it.
Last updated
The short version
Your account, orders, offers, messages and balance are stored on the Trokazo server so they follow you on any device. A few preferences, like display currency and recent searches, stay in your browser.
The sections below describe what is stored, why, and how to remove it.
What is stored
- Account: your display name, email and a salted hash of your password. The password itself is never stored.
- Session: a secure sign-in cookie, kept until you sign out or it expires.
- Shopping: your current checkout, orders, saved offers and recent searches.
- Selling: offers you create and messages with sellers.
- Preferences: display currency, notifications and newsletter signup.
How it is used
Stored data is only used to make the storefront work: to keep you signed in, keep your checkout open, show your orders and personalise prices in your chosen currency. There is no analytics, advertising or tracking.
Sharing
Your data is not sold or shared with advertisers. A seller sees only what they need to deliver an order, such as your character name and a masked email address, and never your payment details.
Offers delivered by partner sellers
When you buy an offer sourced from a partner seller on another marketplace, Trokazo shares only what is needed to deliver it: the delivery details from your order, such as your character name and server, and the order chat messages passed to the partner seller. Your email address and payment details are never shared with partner sellers.
Messages passed between you and the partner seller are stored with your order on the Trokazo server, like any other order chat.
Newsletter
Subscribing in the footer saves your email on this device to show that you are subscribed. No emails are sent. You can unsubscribe from the same place at any time.
Your choices
You are in control of everything stored:
- Edit your name and email, or delete your account, in account settings.
- Clear notifications from the notifications page.
- Clear this site's data in your browser settings to remove the preferences kept in your browser.
Security
Passwords are hashed with Argon2 on the server and never stored as plain text. Sign-in uses a cookie that page scripts cannot read. On a shared computer, turn off “Keep me signed in” and sign out when you are done.
See also the terms of service.