Privacy policy
Account, order, message, and verification data.
Controller and status
This is a draft for a private preview. Before public launch Riot Racing must identify the data-controlling legal entity and contact details, applicable rights, retention schedule, and the providers actually used. It is not a representation of universal privacy compliance.
Data collected
Public accounts provide their email address and verify ownership by code. Private staging accounts may use ChatGPT sign-in. It stores public seller profiles, used-part listings and photos, orders and delivery contact details, messages including blocked messages, reports, agreement versions and acceptance times, and administrative actions. Security records include keyed login-code digests, hashed login sessions, browser-bound login challenges, hashed email-verification challenges, attempt counts, expiry, hashed browser-verification tokens and recovery codes, and encrypted authenticator secrets. Stripe handles card and bank information when connected; the marketplace stores provider references.
Use and disclosure
Information operates the marketplace, verifies accounts, supports fulfillment, prevents abuse, resolves disputes, and maintains required records. Seller usernames, display names, profile pictures, biographies, location city/state, and listings are public. Profile pictures are resized and stripped of embedded metadata; removed pictures are no longer publicly linked, though stored copies may remain pending retention cleanup. Shipping addresses are visible to the buyer and authorized staff and shared with the seller after payment for fulfillment. Cloud hosting, email, and payment services process data for their functions. Email codes are sent only to the account email. Moderators can review conversations and reports.
Cookies and assets
Essential sign-in and account-verification cookies support security. No advertising pixels or marketing analytics are added by this preview. Sample product photographs are served from this site and are clearly labeled reference images, not actual used listings.
Retention and rights
Use a privacy support request to ask for access, correction, deletion, or information. Identity verification may be required, and financial, dispute, or legal records may need retention. Automated exports, deletion, and scheduled security-record cleanup are not active in this preview; the retention schedule and operating process must be completed before public launch. Do not put identity documents, passwords, bank details, or verification codes in support messages.
Age and changes
The marketplace is for adults 18 and older. Material changes to data use should be communicated as legally required before taking effect. Update this policy when selecting public authentication, shipping, support, or additional analytics providers.