Privacy Policy

1. What we keep

From your account: username, email, password (stored hashed, never in plain text), language and, if you connect it, your Discord ID and avatar.

From your use of the site: your listings, deals, reviews, reports, IP address and access times. We keep IP for security — it is what makes investigating fraud and abuse possible.

2. Why we keep it

To run the site (your account, listings and deals), to calculate reputation, to fight fraud and fake accounts, and to meet legal obligations where they exist.

We do not sell your data. We do not hand your data to any advertiser.

3. What is public

Your username, listings, reputation, reviews and the creation date of your Discord account are public — that is what makes reputation verifiable.

Your email, your IP and your password are never shown to other users.

4. Who we share with

With those who run the infrastructure: hosting and email server. With Discord, only if you choose to connect your account. And with authorities, if the law requires it.

5. For how long

Account data stays while your account exists. The access log (IP, browser, date and time of each login) is kept for 180 days; an ended session, 30 days; the log of administrative actions, 365 days. After that, the site deletes them on its own. Encrypted database backups keep all of this longer — daily ones up to 90 days on the server and up to 2 years off it; disaster-recovery ones for as long as they are needed — with no day-to-day use. Deal records may be kept longer when needed to prevent fraud or comply with the law.

6. Your rights

Under Brazilian data protection law (LGPD), you can request access to your data, correction, account deletion, and an explanation of how it is used. A copy of what we keep about you is available right away through the "Download my data" button on your account page; other requests go through the contact page.

Deleting your account removes your personal data. Records tied to other people’s deals may be kept in anonymised form, so the history of those who traded with you is not erased.

7. Security

Passwords are stored with bcrypt, access uses a protected cookie, and two-factor authentication is available in your account. No system is free of risk, but we use standard industry practice.

8. Minors

RMTCheck is for people 18 and over. We do not knowingly collect data from minors. If we learn an account belongs to a minor, it is removed.

Talk to us

Questions about these rules, a report, or a request about your data: use the contact page.