Privacy policy

The Classic is run by [Company name], CVR [number], [address]. We are the data controller for the personal data described here. Questions about privacy: [contact email].

• Account details: name, email address, password (stored encrypted by our login provider), city, and whether you sell privately or as a shop.
• Shop details for professional sellers: shop name, CVR number, profile text.
• Contact details: address and phone number, if you give them. These are only visible to you. Listings show the city only.
• Listings: photos, descriptions, price, quantity, condition and pickup city.
• Wishlists you create and the pieces you save.
• Messages between buyers and sellers, and which pieces they are about.
• Technical data needed to run the site securely, such as IP address and browser type in server logs kept by our hosting providers.
• Listing views: when you open a listing we count the visit once per day, so sellers can see how many people have seen their piece. If you're signed in we use your account; otherwise a one-way code made from your IP address, browser and the date, which can't be traced back to you and changes every day. No cookie is used. Sellers only see totals, and only above 10.

• To provide the marketplace — your account, your listings, wishlists and messages. Basis: our agreement with you (GDPR art. 6(1)(b)).
• To keep the marketplace trustworthy — checking listings for mass-market brands and replicas, verifying shops by CVR number, and preventing misuse. Basis: our legitimate interest (art. 6(1)(f)).
• To send emails you need, such as confirming your email address and resetting your password. Basis: our agreement with you.
• To meet legal obligations, for example bookkeeping or requests from authorities. Basis: legal obligation (art. 6(1)(c)).

The Classic doesn't sell your data and doesn't use it for advertising.

• Everyone can see live listings, the seller's display name or shop name, and the pickup city.
• Messages are only visible to the buyer and seller in the conversation.
• Wishlists, address and phone number are only visible to you.
• Our administrators can see listings waiting for review in order to approve or reject them.

We use these providers to run The Classic. They process data on our behalf under data processing agreements:

• Supabase — database, login and photo storage.
• Vercel — hosting of the website.

Where a provider processes data outside the EU/EEA, the transfer is protected by the EU Commission's standard contractual clauses or an equivalent safeguard.

• Your account and its data are kept until you delete your account.
• Listings you remove, and messages, are deleted together with your account.
• Data we must keep by law (for example bookkeeping) is kept for as long as the law requires.

We only use cookies that are necessary for the site to work. We don't use cookies for advertising or tracking.

• Sign-in cookie (set by Supabase, starts with sb-) — keeps you signed in. Removed when you sign out, and expires after at most 400 days.
• site_consent — remembers your cookie choice for 12 months.

If we add optional cookies later, for example for statistics, we will only set them if you choose "Accept all". You can change your choice at any time: Cookie settings.

Under the GDPR you have the right to:

• see the personal data we hold about you
• have incorrect data corrected
• have your data deleted
• object to processing based on our legitimate interest
• get your data in a portable format
• have processing restricted in certain cases

Write to [contact email] to use your rights. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

If we change this policy, we update the date at the top. If the changes are significant, we let you know by email or on the site.