Privacy Policy
Last updated 22 July 2026
This policy explains what BlackShares Shop ("we", "us") collects, why, and the choices you have. We aim to collect the minimum needed to run the marketplace and to be transparent about it.
Information we collect
- Account information — your name and email when you register, or the profile shared by your identity provider when you sign in with it.
- Business information — details you provide when you list a business (name, category, description, location, website, and verification materials).
- Commerce & earnings data — when a purchase is attributed to you, we receive order and commission details from the connected store (e.g. Shopify) to calculate cash back, commissions, and community-fund contributions. We do not receive your full payment card details.
- Limited technical data — for fraud prevention we may store a one-way hashed form of your IP address; we do not retain raw IP addresses.
Cookies
We use a small number of cookies:
- Essential — a session cookie to keep you signed in and a security (CSRF) token. These are required for the site to function.
- Referral — if you arrive through a member's share link, we store a referral marker so that member can be credited if you later sign up.
Affiliate attribution itself is handled with a ref value in the link URL — not a
cross-site tracking cookie. We do not use third-party advertising or ad-tracking cookies.
How we use your information
- Operate the marketplace, calculate and pay cash back and commissions, and administer the community fund.
- Verify businesses, prevent fraud and abuse, and secure your account.
- Send transactional email (for example verification, earnings, and payout notices).
Service providers
We share data only as needed with providers that help us operate: connected commerce platforms (e.g. Shopify), payment/payout processing (Stripe), transactional email (Postmark), and cloud storage. They may only use it to provide their service to us.
Your choices & rights
You may access or update your account information, and you may request deletion of your account. When you do, we anonymize your personal information while retaining records we are legally required to keep (such as financial and payout history). To make a request, contact us below.
Security
Passwords are hashed, sensitive integration tokens are encrypted at rest, and traffic is served over HTTPS. No system is perfectly secure, but we work to protect your information.
Changes
We may update this policy; we'll revise the date above when we do. Continued use of the platform means you accept the current version.
Contact
Questions or requests? Email privacy@blackshares.com.