Privacy
This page describes which personal data the AdScaled Shop marketplace stores, why and for how long. The controller is AdScaled (Pavel Alexander Kubík, Company ID 23422637, Dukelských Hrdinů 289, 417 42 Krupka, Czech Republic), contact contact@adscaled.media.
Customer account
When you register we store your name, e-mail address, a password hash (scrypt, never the password itself), the interface language and the date your e-mail was verified. If you turn on two-factor authentication we store its encrypted key and hashes of the recovery codes. One-time links for e-mail verification (48 hours) and password reset (1 hour) are stored only as hashes and deleted after use or expiry.
Orders, reservations and payments
For an order we store the contact details you enter (name, e-mail, phone, delivery address and note), the ordered goods, prices, delivery and payment method, payment status and the order history. The shop that sells the goods sees the order, because it has to handle and ship it.
For a reservation we store the product, quantity, your note and the pickup code; reservations that are not collected expire after 48 hours. Card payments are processed by Stripe: we pass it your e-mail and the order numbers and only learn whether and when the payment succeeded. Your card number never reaches us.
Reviews, questions, favourites and support
Reviews, questions to sellers and "helpful" votes are stored with your account; reviews and questions are shown publicly with your first name and the initial of your surname. Favourites are stored so that we can e-mail you about a price drop or a return to stock. Messages from the support form (name, e-mail, topic, optional order number, text and the page you wrote from) are stored and e-mailed to our team.
Cookies and browser storage
We use a single necessary cookie: the sign-in session (HttpOnly, valid for a limited time, 30 days by default, deleted when you log out); the server keeps only its hash. We use no advertising or analytics cookies and no third-party tracking code.
The cart, guest favourites, comparison, recently viewed products, recent searches, the language choice and the conversation with the Pip assistant are kept only in your browser (localStorage, sessionStorage). The Inter font is loaded from Google Fonts, so your browser connects to Google's servers for it.
Server logs and security
To protect accounts we write security events (for example failed logins, refused requests or administrator actions) to the server log with the IP address and time; e-mail addresses appear there only as a short hash. Rate limits keep IP addresses only in memory for the length of the limit window. The site runs on Railway hosting behind the Cloudflare network, which process technical connection data to deliver the pages; hosting logs are kept only for a limited time.
E-mails
We send only service e-mails: account verification, password reset, orders and reservations, questions and answers, price alerts for saved products and replies from support. No newsletter.
How long and your rights
Account data are kept until you delete the account in the settings. Deleting it removes your profile, sessions, favourites, reviews, questions and reservations; orders stay with the shops without a link to your account, because they need them for accounting and complaints. If you run a shop, write to us before deleting the account.
To ask for access to your data, a correction or deletion, write to contact@adscaled.media. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ).