Privacy Policy
Last updated: 11/11/2026
We collect the minimum data needed to run OnlyVags: your name and email from your chosen sign-in provider (Google, Microsoft or Amazon), profile details you provide, listings and contact requests you create, payment and complimentary-credit grant/redemption records for contact unlocks, and basic usage/telemetry data for security and reliability.
How we use it. To operate your account, publish and moderate listings, provide contact unlocks, administer promotional credits, process payments, keep the platform secure, and improve the service. We do not sell your personal data.
Service providers. We use authentication providers, Azure hosting and maps, monitoring services, image storage, AI services and Stripe payment processing. These providers process data only as needed to provide their services. Seller contact details are shared with a buyer only after a Stripe payment is verified or a complimentary unlock credit is redeemed.
Location features. If you choose to use map or nearby-search features, your browser may provide approximate location to request a nearby listing search. We do not need to store your precise device location for this feature. Seller locations are deliberately shown at an approximate area; sellers' exact addresses and business locations are not displayed.
Visitor statistics. To understand which pages are useful, we count page views and how long each page is open. This uses a random identifier held only in your browser tab (cleared when you close it) - no cookies, no IP address storage and no advertising or cross-site tracking. If you are signed in, a visit is linked to your account so we can support you. Bots are excluded, and we respect your browser's Do Not Track setting. Statistics are kept for up to 14 months.
Retention. We keep account data while your account is active, and as required by law afterwards.
Your rights. You can request access to, correction of, or deletion of your data at any time via Contact us.
Security. Data is encrypted in transit and at rest, and access is limited to what's needed to operate the service.