Privacy Policy

The data controller for personal data processed through RMT.GG is RMT Technologies OÜ (trading as RMT.GG).

Tornimäe tn 5 10145 Tallinn, Kesklinna linnaosa, Harju maakond Estonia

Registry code: 17535722 (Estonian Commercial Register: https://ariregister.rik.ee/est/company/17535722)

For privacy-related requests, contact us at privacy@rmt.gg.

We may collect:

Account and profile data (e.g. email, username, display name, locale, bio, profile image, country settings).

Transaction and wallet data (orders, payouts, withdrawals, balances, billing address snapshots, tax identifiers you provide).

Listing, order, and chat content you submit (messages, images, reviews, dispute evidence).

Technical and security data (IP address, browser and device type, user agent, server logs, session identifiers).

Fraud-prevention signals (device fingerprint hashes, canvas/WebGL/audio fingerprints where collected, velocity and risk metrics at checkout).

Support communications and compliance records (consent receipts, payout verification, privacy requests).

Affiliate attribution data (referral codes stored in cookies or local storage).

Where the GDPR applies, we rely on: performance of a contract (providing the marketplace); legitimate interests (security, fraud prevention, abuse detection, service improvement); consent (analytics and advertising measurement cookies and similar technologies where required); and legal obligations (tax, accounting, law enforcement requests).

We use data to operate accounts, process orders and payments, facilitate chat, prevent fraud and abuse, enforce our terms, communicate service messages, comply with law, and improve the Platform.

We may share data with: suppliers as needed to fulfill your order (e.g. delivery fields you provide at checkout); other users when needed to complete transactions (e.g. order chat between buyer and fulfilling supplier); payment processors (Stripe, PayPal, NOWPayments), hosting and infrastructure providers (e.g. Cloudflare), email delivery (Resend), product analytics (PostHog: with analytics cookies when you accept, or cookieless measurement when you choose Essential only), advertising measurement (Google Ads / gtag when you accept optional cookies), optional translation services (Google Translate API for chat notification digests when enabled), authorities when required; and professional advisers.

We do not sell your personal data.

We may process data in the European Economic Area and other regions where we or our providers operate (e.g. Cloudflare, hosting). Where data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where required.

We retain data as long as your account is active and as needed to provide the service. After closure or a deletion request, we may retain certain records (e.g. invoices, order and payment logs, dispute records, consent receipts, tax records) for legal, tax, and accounting periods required by law.

We use cookies and similar technologies for essential purposes, including:

Authentication and session security (e.g. refresh token cookie).

Locale and interface preferences (e.g. language cookie, theme storage).

Affiliate attribution (e.g. referral cookie).

Waitlist and feature gates where applicable.

We also use browser local storage for client-side identifiers used in fraud prevention (e.g. a device tracking id).

With your consent, we use PostHog (product analytics) cookies and similar storage to understand how the Platform is used (for example page visits, signups, and listing activity). If you decline product analytics, we may still send limited product analytics to PostHog in cookieless mode (no analytics cookies or local storage for tracking; users are counted with a privacy-preserving server-side hash). PostHog acts as our processor for this analytics data.

With your consent for advertising and measurement, we load the Google tag (gtag.js) for Google Ads measurement and conversion tracking (Consent Mode signals for ad_storage, ad_user_data, and ad_personalization). If you decline advertising cookies, Google tags still load in a restricted Consent Mode state without advertising cookies, so Google can model conversions where permitted; we do not set advertising cookies without that consent. We do not sell your personal data.

You can accept all, choose categories, or use essential cookies only via our cookie banner. You can reopen Cookie settings from the site footer at any time. Essential cookies are required for the Platform to work. You can also control cookies through your browser; some features may not work without essential cookies.

Depending on your location, you may have rights to access, rectify, erase, restrict processing, object, data portability, and withdraw consent. You may lodge a complaint with a supervisory authority.

To exercise rights, use the privacy tools in your account Settings or contact us at the email below. We may need to verify your identity. Account deletion and data export requests are reviewed manually; we will respond within the timeframes required by applicable law. Some data may be retained where we have a legal obligation or legitimate interest (e.g. completed transaction records).

We implement technical and organizational measures appropriate to the risk, including access controls and encryption in transit where applicable. No method of transmission or storage is 100% secure.

The Platform is not directed at anyone under 18 years of age (or the age of majority where you live). We do not knowingly collect personal data from children or minors who are not eligible to use the Platform under our Terms of Service.

We may update this Policy and will post the revised version with an updated date. Significant changes may require additional notice where required by law.

For privacy questions or requests: privacy@rmt.gg

You may also contact the data protection authority in your country.