Privacy Policy

1. Who is responsible

Escrowden is the controller of the personal data described here. For any privacy question or to exercise a right below, contact privacy@escrowden.com.

2. What we collect

Account data

Authentication is handled by our identity provider. We receive and store an account identifier, your display name or username, and your email address. We do not store your password — the identity provider does.

Identity verification data

If you apply to sell, we ask for your full legal name, date of birth, the country that issued your identity document, which document it is, a photograph of that document, and a photograph of you holding it. We also record the verification status, the names of the images you upload, and the times you submitted them and we reviewed them. Every seller provides this before they can list or quote, and you must be at least 18.

We ask for the same information from anyone who is not a seller but whose total withdrawals reach the limit that applies to unverified accounts. If you only ever buy, we do not collect any of it.

These images are held in private storage, are not public, and are accessible only to reviewers who need to make the approval decision. They are used to confirm you are the person you say you are and for no other purpose.

Seller account data

The OSRS character name you trade from, and any evidence you attach to show you hold what a listing offers, together with the review status of that evidence.

Marketplace activity

Listings you publish, orders you place or receive, your wallet balance and total earned, and the ledger of deposits, holds, releases and payouts attached to your account.

Order messages

Messages you send in an order chat, together with who sent them and when. Both parties to the order can read the thread.

Technical data

Standard server logs generated when your browser makes a request, such as IP address, user agent and timestamp, used for security and to diagnose faults.

3. Why we use it, and our legal basis

To run your account and process orders — necessary to perform our contract with you.
To operate escrow and resolve disputes — necessary to perform our contract, and our legitimate interest in a marketplace that works.
To verify the identity of sellers — our legitimate interest in reducing fraud against buyers, who are sending money to someone they have never met, and in keeping under-18s from trading on the platform.
To verify identity before large withdrawals — our legitimate interest in preventing money laundering and payouts to stolen accounts, and, where it applies to us, compliance with a legal obligation.
To prevent fraud, abuse and unlawful use — our legitimate interest in protecting users and the platform.
To meet legal obligations — where we are required to retain records or respond to lawful requests.

Our identity provider, which handles sign-up, sign-in and credential storage.
Our hosting and database provider, which runs the application and stores marketplace records.
The other party to an order, who can see your seller or buyer display name and the messages you send in that order’s chat.
Authorities or advisers, where we are legally required to disclose, or need to establish or defend a legal claim.

We do not sell your personal data, and we do not share it for advertising.

5. How long we keep it

Account data — for as long as your account is open, and for a reasonable period afterwards to handle disputes and meet legal obligations.
Order, wallet and ledger records — retained after an order completes, because they are the financial record of the trade and may be needed for a dispute or an audit.
Order messages — kept alongside the order they belong to.
Verification data — kept while your seller status is active and for a reasonable period after it ends.
Server logs — kept for a short period for security and diagnostics.

6. Your rights

Depending on where you live, you can ask us to:

give you a copy of the personal data we hold about you;
correct data that is wrong or incomplete;
delete data, where we do not have an overriding reason to keep it;
restrict or object to how we use it;
transfer it to another provider in a portable format;
withdraw consent, where we relied on consent.

Email privacy@escrowden.com and we will respond within the time your law allows. Note that we may not be able to delete records tied to a completed order while we still need them for dispute or legal reasons. If you are unhappy with our response, you can complain to your local data protection authority.

7. Cookies and similar technologies

We use cookies and browser storage that are strictly necessary to run the site — keeping you signed in and maintaining your session. We do not use advertising cookies or third-party tracking pixels. If that changes we will update this policy and ask for consent where it is required.

8. Security

Access to production data is restricted, traffic is encrypted in transit, and credentials are held by our identity provider rather than by us. No system is perfectly secure, so please use a strong, unique password and enable multi-factor authentication where it is offered. If you believe you have found a security issue, email support@escrowden.com.

9. International transfers

Our providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

10. Children

The platform is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We will update this page when our practices change and revise the “last updated” date above. Material changes will be notified in advance where reasonably possible.