Privacy policy.

1. What we collect

2. What we never collect

3. Cookies

We use a single, strictly functional mechanism: an authentication session (stored locally in your browser) that keeps you signed in. It identifies your session, not your behavior. Because we use no tracking cookies, you won't see a cookie banner — there's nothing to consent to.

4. Identity documents

The ID submitted with a shop application is used once, by a human, to verify the shop owner's identity. It is stored encrypted in a private bucket, is never public, never shared with third parties, and is deleted upon request once verification is complete.

5. Who processes your data

That's the complete list. No marketing platforms, no ad networks.

6. Your rights

You can request a copy of your data, correct it, or delete your account and everything attached to it at any time. Email us at hello@tongraal.com and a real person will handle it.

7. Changes

If this policy ever changes, we'll say so plainly on this page with a new date. The no-tracking principle is not up for revision.