PRIVACY POLICY

Account details. When you sign up we receive your email address, and your name and profile picture if you sign in with a third-party account. Sign-in is handled by Clerk, and passwords never reach us.

What you publish. The display name, logo, tagline and link on a listing, plus the species you chose. All of this is public by design, visible to anyone on the globe and on your listing page, and may be seen by search engines.

Purchase records. Which territory you claimed, when, the amount and the payment reference. Card details go straight to Paddle and we never see or store them.

Technical logs. Our host records ordinary request data such as IP address, timestamp and user agent, for security and diagnosis. We run no analytics, advertising or tracking scripts on this site.

To create and secure your account, to sell you a listing and show it, to contact you about a purchase or a problem with your listing, to keep the records tax and accounting rules require, and to protect the site from abuse. We do not sell your personal data, and we do not use it for advertising.

Where the law asks for a legal basis, ours is performing our contract with you for the account, purchase and listing; our legitimate interest in a secure, working site for technical logs and abuse prevention; and legal obligation for financial records.

• Clerk — accounts and sign-in.
• Paddle — payments, as merchant of record. Paddle takes your billing and card details directly and is a controller of that data under its own privacy policy.
• Netlify — hosting, and the logos you upload.
• Render — the database holding listings and accounts.

These providers may process data outside Mauritius, including in the EU and the United States, under the safeguards in their own terms. We may also disclose data where the law requires it.

We use only what the site needs to work: a session cookie from Clerk to keep you signed in, and, while the site is in pre-launch, a cookie recording that you entered the access password. There are no advertising or analytics cookies, so there is no tracking to opt out of.

Account and listing data for as long as your account or listing exists, and purchase records for as long as tax and accounting rules require, typically seven years. Technical logs are kept for a short period by our host.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@untildisclosure.com and we will respond within one month.

Deleting your account removes your listings from the globe. We may keep the minimum purchase record the law requires us to hold, and if you are in the UK or EU you may also complain to your local data protection authority.

This site is not intended for children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, tell us and we will remove it.

If we change this policy the new version appears here with a new date at the top, and we will tell account holders by email where the change is significant.