Privacy
Which of your data Trademon uses, what for, how long, and what your rights are. In plain language.
Last updated: 4 November 2026
In short
- We only use what is needed for your account, your collection and preventing abuse.
- We never sell anything on. We always set necessary cookies; cookies from Meta for ads only if you give consent for them.
- You can always view, correct or have your data deleted. You delete your account yourself in your settings.
Who we are
Trademon is responsible for the personal data on Trademon. You can always ask us about your data.
Which data and why
Per kind of data: what we keep, what for, on which legal basis under the GDPR and how long.
Account
| Data | What for | Legal basis | How long |
|---|---|---|---|
| Name, email address, password (stored encrypted) and language | Your account, logging in, emails in your language | Contract | As long as your account exists |
| Username | Your profile (public), finding friends and the overview of collectors (with what you have up for trade and your reviews; can be turned off at Profile) | Contract | As long as your account exists |
| Collection and who may see it | Keeping track of your collection and showing it the way you choose | Contract | As long as your account exists |
| Shared collection: who you share a collection with, what each person may do (view, keep track, trade and sell), who is an admin, and invitations | Keeping one collection together: the others in the group see the collection and change it if they are allowed to | Contract | Until you stop sharing or delete your account. The collection stays with the group; whoever stops can take a copy |
| A file you import (the export of your collection from another app) | Bringing in your collection in one go | Contract | We don’t keep a file you import. We read it and delete it right away; what we recognise stays in your session for a short while until you click Import |
| Your export and the name of your app, when you ask for an app | Seeing how we can add your app, and letting you know whether it worked | Contract | When you ask for an app, we keep your file until we have added that app, and at most 90 days. The request itself (without the file) stays as long as your account exists |
| Friends and friend requests | Friends, and sharing your collection with them | Contract | Until you remove them or delete your account |
| Listings with your own photos (without location or other metadata) and description (public) | Showing what you have for trade | Contract | Until you delete the listing or your account |
| Photos you add with your phone through the QR code in the form, until you save the listing | Putting the photos from your phone in the form on your computer | Contract | One day; then removed, also when they never went into a listing |
| Town from your address, if you turn it on (only the town; public on listings with pickup) | Showing where you can pick up | Contract | Until you turn it off or delete your account |
| The middle of the postcode of your shipping address (rounded to about a kilometre, never your house) | Showing the distance to listings with pickup, rounded to 5 km, and finding listings nearby | Contract | Until you change your address or delete your account |
| Wishlist with your preferences (always visible to other collectors, also when your collection is private; without your name for visitors without an account) | Showing who has what you are looking for, and showing other collectors what you are looking for (on your profile, at Wanted and in their daily mail), so they can offer you that card or send you a message about it | Contract | Until you take the card off your wishlist or delete your account |
| Shipping address (stored encrypted; only visible to your trade partner, and only once your trade is accepted) | Being able to send you cards in a trade | Contract | Until you change it or delete your account |
| Your trades: proposals, what was in them, shipping and receipt dates and tracking codes | Making trades between collectors possible, and looking into it when a parcel does not arrive | Contract | As long as your account exists |
| Your orders: what you bought or sold, amounts, delivery, a copy of the shipping address, tracking, pickup appointments, problems with photos and decisions of an administrator | Making buying and selling between collectors possible, holding the money and paying it out, and helping with a problem | Contract | 7 years after the order, as we have to keep the records that long (tax retention duty) |
| Payments and payouts: amounts, status, the references at Stripe and what Stripe charged; no bank or card details, those stay at Stripe | Processing payments, paying out sellers, refunding, and our own figures | Contract and legal obligation | 7 years (tax retention duty) |
| Shipping labels: the parcel number, tracking, the status at the carrier, the label as a PDF, and a chosen parcel point | Making labels, following the parcel, and collecting surcharges of the carrier from the sender | Contract | 7 years (tax retention duty); the PDF label until the order is completed |
| Sales and revenue per quarter | The European DAC7 rules: keeping track of who reaches the limit above which Stripe reports a seller to the tax authorities. We do not keep your tax number; Stripe asks for it | Legal obligation | 7 years |
| Notifications on the site (such as a trade proposal, a match on your wishlist or a review), whether you have seen and read them | Showing you on the site what happened for you | Contract | 90 days, or shorter when you delete them yourself |
| Messages you send and get, with what they are about (a listing or trade), when they were read, whom you blocked, and reports of conversations | Letting collectors talk to each other without sharing a phone number or email address; fighting abuse. An admin reads only a conversation that was reported, and then the whole conversation | Contract and legitimate interest (safety) | As long as the conversation exists; if you delete your account, your messages stay with the other as a deleted account. A reported conversation stays until the report is handled |
| Photos you send in a message, or the other sends you, and whether the receiver viewed them; per checked photo the outcome and the number of tokens (without the photo) | Letting collectors see what a card looks like; stopping photos with nudity, sex or violence before they are sent, and keeping track of what that costs | Contract and legitimate interest (safety, also of minors) | One year after sending, or earlier when the sender deletes their account. In a reported conversation until the report is handled. The outcome of the check as long as your account exists |
| Photos for a message or a listing in which the check saw no card or product (for a message also no shipping), and that were not sent or added; warnings from an admin with the reason | Preventing misuse of messages and listings: an admin looks at the photo and can warn or block you | Legitimate interest (safety, also of minors) | The photo until an admin has looked at it, at most 30 days. The decision and warnings as long as your account exists |
| Photos you take with the card scanner: not the photo itself, only the outcome (found or not) and the number of tokens | Looking up the card on the photo in the catalogue, and keeping track of the costs of the scanner | Contract | We do not keep the photo: it is deleted after reading. The outcome as long as your account exists |
| Reviews you give and get, with scores, comment and reply (public with your username, once both reviewed or after 14 days) | Showing others how reliable a collector is | Legitimate interest | As long as the account of the reviewed collector exists; a review you gave stays without your name after you delete your account |
| Whether you want the review mails | Reminding you to review and telling you that you were reviewed | Contract | As long as your account exists |
| Whether you want the daily mail about your wishlist and about who looks for what you have up for trade, and up to when it was sent | Mailing your new matches once | Contract | As long as your account exists |
| Two-factor authentication (secret key and recovery codes, encrypted) and passkeys (public key, name, last used) | Better protection of your account | Contract | Until you turn them off or remove them |
Security and abuse
| Data | What for | Legal basis | How long |
|---|---|---|---|
| IP address and browser when registering and logging in | Preventing fraud and abuse, confirming logins from a new network, blocking | Legitimate interest | As long as your account exists; for an account blocked for abuse, until 2 years after the block |
| Known browsers (an encrypted code and when it was last used) | Not having to confirm every time you log in | Legitimate interest | Until you change your password; the cookie expires after 1 year |
| Blocks (reason, email address, by whom and when) | Preventing abuse and repeat abuse | Legitimate interest | As long as the account exists; after a blocked account is deleted, until 2 years after the block |
| Sessions (IP address, browser, last activity) | Staying logged in during your visit | Contract | 2 hours after your last click |
| Temporary data (login confirmation, limits on attempts) | Protecting your account against password guessing and spam | Legitimate interest | From a few minutes to an hour |
Contact
| Data | What for | Legal basis | How long |
|---|---|---|---|
| Name, email address, subject, message, language and (when logged in) your username | Answering your question | Legitimate interest | Not on the site; in our mailbox, until 1 year after it was handled |
Ads
| Data | What for | Legal basis | How long |
|---|---|---|---|
| Your visit to the site via the Meta Pixel: which pages you view, your IP address and your browser, only if you give consent for it | Measuring which ads on Facebook and Instagram bring in new collectors | Consent | Nothing with us; Meta keeps it under its own terms. The _fbp cookie 90 days, or until you decline via Cookies at the bottom of the page |
Contract means: needed to make your account and the site work. Legitimate interest means: needed to protect the site, you and other collectors against abuse and fraud. Consent means: only if you say yes, and you can always withdraw it via Cookies at the bottom of the page.
What we do not do: no analytics, no social media login, and no cookies from Meta without your consent.
Security
- Everything goes over an encrypted connection (https).
- Passwords are only stored encrypted; nobody can see them, not even us.
- You can use two-factor authentication or a passkey. Logging in from an unknown network asks for a confirmation by email.
- Only admins with two-factor authentication can view account data, and only when needed.
Your rights
You have the following rights over your data. We respond within one month.
- See which data we have about you.
- Have incorrect data corrected. You change your name, email address and username yourself in your settings.
- Have your data deleted. You delete your account yourself in your settings; your collection, friends, sessions, known browsers and IP addresses go with it. Only for an account blocked for abuse do we keep the block and IP addresses until 2 years after the block.
- Object to use based on legitimate interest, or have the use restricted.
- Get your data in a file you can take with you.
Send a message through the contact form with the subject Privacy, or email us.
Not happy with how we handle your data? Let us know first. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Age
You are welcome at any age, and we do not ask for your age. Are you under 16? Then read this statement together with your parents. Parents can always ask us to see the data of their child or to delete the account.
Changes
When features are added that use other data, we update this statement, as on 25 October 2026 for buying, paying and shipping labels. With a large change you get a notice. At the top is the date of the last change.