Privacy Policy
1. Who we are
This policy covers the A Market website and forum at amarketshop.lol and the A Bot Discord service (together, "the Service"), run by the A Team ("we", "us"), based in Sweden. We are the data controller for the data described below. Contact us through our Discord server or by sending a private message to a staff member on the forum.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Username, email address, password (stored only as a secure hash) | To create and secure your account and send password-reset emails. Your email is never shown publicly. | Contract |
| Your posts, shouts, profile posts, private messages, reactions, profile details, profile picture and banner | To run the forum features you use. | Contract |
| IP address at sign-up, and IP addresses of failed logins and password-reset requests | To stop spam accounts and password-guessing attacks. | Legitimate interest (security) |
| Linked Discord account (Discord ID, display name and whether you have the Basic/Premium role in our server) — only if you choose to link it | To let you log in with Discord, show your subscriber badge and unlock subscriber sections. | Consent (you can unlink any time) |
| Moderation records (reports, mutes, bans and the reasons) | To keep the community safe and staff accountable. | Legitimate interest |
Private messages are stored on our server. Staff can't read them through the forum, but the site operator can access the database when needed for security or legal reasons. Don't send passwords, API keys or seed phrases to anyone — our staff will never ask for them.
The A Bot itself does not keep a per-user history of who received which signal.
3. Cookies and local storage
We use one essential cookie (ashop_sess) to keep you logged in. Your browser's local storage remembers small preferences, such as a dismissed announcement. We use no advertising or analytics cookies, so there is no cookie banner.
4. Third parties
- Patreon handles subscriptions and billing. We only see your tier, through the Discord role Patreon gives you. See Patreon's privacy policy.
- Discord hosts our server and the bot, and is used for "Log in with Discord" if you choose it.
- BisectHosting hosts this website and its database in a data centre that may be outside the EU. Standard server logs (such as IP addresses) are kept by the host.
- Cloudflare Turnstile (if enabled) runs the "I am human" check on sign-up and password reset.
- Your browser loads fonts from Google Fonts, icons from unpkg.com and crypto prices from CoinGecko. These services receive your IP address when your browser contacts them.
We don't sell or rent personal data, and we don't share it with data brokers or advertisers.
5. How long we keep it
- Account and posts: until you ask us to delete your account.
- Alerts: 60 days. Failed-login records: about 1 hour. Password-reset links: 1 hour.
- Moderation records: as long as needed to handle abuse or repeat offences.
6. Your rights
Under the GDPR you can ask to access, correct, delete or export your data, and to object to or restrict how we use it. You can edit most things yourself in Edit profile. For anything else, contact us (see section 1). We'll reply within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY).
7. Age
The Service is for people aged 18 or older. We don't knowingly collect data from anyone younger.
8. Security
Passwords are hashed and never stored in plain text. The site uses HTTPS, and uploads are re-processed to strip anything that isn't an image. No system is perfectly secure, so please use a unique password.
9. Changes
If we change this policy, we'll update the date above and announce important changes on the forum or in Discord.