Privacy Policy

When you browse

You can browse the market without an account.

We use first-party analytics to see how the site is used: pages you open, searches, clicks, and that you copied something (and whether it was a seller name or a price, not the text itself), together with browser and device information, an identifier for your browser and visit, your IP address and approximate location, and diagnostic data. We also use Vercel Web Analytics, which doesn’t use cookies. Sign-in, account and admin pages are not included in analytics.

To count returning visitors, we give your browser a random identifier, kept in a first-party cookie (gms_vid, up to 400 days) and in browser storage. It isn’t linked to your name or used by anyone else. To avoid counting one person twice, a new identifier seen from an IP address a returning visitor used before (we keep IP addresses for 30 days), from the same browser with the same language, time zone and screen size, may be treated as the same visitor. In the EU, EEA, UK and Switzerland this only happens after you allow the cookie. If you sign in, visits from that browser are linked to your account. IP addresses in analytics are deleted after 30 days.

If you’re in the EU, EEA, UK or Switzerland, we ask first: until you allow it, we use a new identifier for each visit and set no analytics cookie. If you then allow it, the identifiers used earlier in the same visit are linked to the new one. To change your choice later, clear this site’s data in your browser and we’ll ask again.

Saved items and the on-device Recently viewed list are kept in your browser’s storage. Clearing your browser’s site data removes them, but not information already on our servers.

Market information

Market information includes seller names and shop and listing details from MapleStory Classic World’s Free Market. Seller names and listings are shown publicly on the site.

If you create an account

Accounts are optional. You sign in with Google or Steam; there are no passwords. For an account we store your username, your sign-in link, your sessions (including the IP address and browser they were used from) and security information, your watchlist and price targets, and items you viewed while signed in. Price alerts appear on the site.

We keep moderation and security records, including the account identifiers, decisions and reasons involved, to handle disputes and prevent abuse.

Sign in with Google

We receive your Google account identifier, email address and whether Google has verified it, and basic profile information. We use these to sign you in, link your account, suggest a username and manage account permissions.

We keep the Google account link and, for accounts created through Google, the email address, its verification status and the name used during setup (your given name, or your full name if Google doesn’t send a given name). We don’t keep your Google profile picture or any Google access, refresh or ID tokens, and we don’t request access to Gmail, Drive, Calendar or anything else in your Google account.

If another sign-in method stays linked, you can unlink Google on your account page. Unlinking removes that sign-in link. Your stored profile details stay until you ask us to delete your account.

Sign in with Steam

If you choose Steam, we receive your Steam ID and public profile name. We use the name to suggest a username and don’t keep your Steam avatar. Unlinking Steam removes that sign-in link; the other sign-in method must stay linked.

In-game-name claims

If you claim an in-game name, we store the name, the screenshot you upload, information derived from it for verification and abuse prevention, and the review outcome. Authorized reviewers can see your evidence. Approved in-game names and their verification status are public; your username and screenshot are not shown with listings.

Cookies and browser storage

We use cookies to keep you signed in and to protect the sign-in flow. Browser storage holds saved items, the on-device recent list, preferences, and analytics data waiting to be sent. We use no advertising or cross-site tracking cookies.

Why we use it

To run the site and the features you ask for, understand and improve how it’s used, prevent abuse, and answer requests.

Accounts, sign-in and the features you use are provided because you ask for them. Security, abuse prevention and basic analytics rely on our legitimate interest in running a reliable site. Where the law requires consent for the analytics identifier, we ask for it first, and you can withdraw it by clearing this site’s data.

Who processes it

• Vercel hosts the site and runs Vercel Web Analytics.
• Neon hosts our database.
• Google, only if you sign in with Google; Steam, only if you sign in with Steam.

Market listings and seller names are public on the site. We don’t sell your data or show ads, and we don’t track you across other websites. We may disclose information where the law requires it.

How long we keep it

Analytics IP addresses are removed 30 days after a visit. Other information is kept until you ask us to delete it, except moderation and security records we need to handle abuse.

Your rights

Depending on where you live, you can ask for a copy of your information, to correct it, to delete it, to restrict or object to its use, or for a portable copy. You can ask us to delete your account and the data tied to it at muflettest@gmail.com. We respond within one month, as the law requires, and may need to confirm the request comes from you. You can also complain to your data protection authority.

Children

Accounts are not offered to children under 13, or under 16 in the EU. If you think a child has given us personal information, contact muflettest@gmail.com and we’ll look into it.

Changes

When this policy changes we update the date at the top and give any notice the law requires. See also our Terms of Service.