Privacy policy.

Last updated · July 2026

This policy is issued by Tongraal LLC, a Wyoming limited liability company, 30 N Gould St, Suite #63560, Sheridan, WY 82801, United States — the data controller for tongraal.com.

The short version: Tongraal has no trackers, no advertising cookies, and no analytics scripts. We don't profile you, we don't follow you around the internet, and we will never sell your data. We collect only what's strictly needed to run the service — nothing more. That's not a legal nicety; it's the founding principle of this platform.

1. What we collect

Account data — your name, email address and password (encrypted) when you create an account.
Shop application data — if you apply as a shop: your shop's name, address, story, photos, a government-issued ID, and a proof of registered business — used solely to verify that a real person and a real business stand behind the shop.
Order data — items bought, your name, email, phone number, shipping address, tracking and payment status. It is shared with the shop that fulfills your order, and only that shop. Card numbers are handled by our payment processor (Stripe) and never touch our servers.

2. What we never collect

No behavioral tracking or browsing profiles.
No third-party advertising cookies.
No Google Analytics, Meta Pixel, or similar scripts.
No location tracking.
No data purchased from or sold to data brokers — ever.

3. Cookies

We use a single, strictly functional mechanism: an authentication session (stored locally in your browser) that keeps you signed in. It identifies your session, not your behavior. Because we use no tracking cookies, you won't see a cookie banner — there's nothing to consent to.

4. Identity & business documents

The ID and the business document submitted with a shop application are used once, by a human, to verify the shop owner's identity and business registration. They are stored encrypted in a private bucket, are never public, never shared with third parties, and are deleted once verification is complete.

5. Who processes your data

Supabase — our database and authentication provider (data stored in the United States).
Vercel — our hosting provider.
Stripe — payment processing and shop payouts. Card numbers go directly to Stripe, which has its own privacy obligations.
Resend — delivery of the emails about your orders or your shop application. Nothing else is sent through it.
Square — only when a shop chooses to connect its Square point of sale: Tongraal reads that shop's catalog and stock, and removes an object from its Square stock when it sells online. The shop can disconnect Square at any time. No buyer data is sent to Square.

That's the complete list. No marketing platforms, no ad networks.

6. Your rights

You can request a copy of your data, correct it, or delete your account and everything attached to it at any time. Email us at hello@tongraal.com and a real person will handle it.

7. Changes

If this policy ever changes, we'll say so plainly on this page with a new date. The no-tracking principle is not up for revision.