SellOnBay: ready-made websites on your domain

This explains what SellOnBay collects, why, and the choices you have.

What we collect

Account details: name, email and sign-in method.
Order details: the site you bought, your domain, and the messages you send in an order chat.
For sellers: payout details and the verification needed to pay you.
Basic technical data such as device type and error logs, used to keep the service secure.

Why we use it

To run your orders, hold and release payments, and set up your domain.
To keep the platform safe, including blocking contact details in chat and reviewing reports.
To contact you about your account and orders.

Who we share it with

Only the providers needed to run the service, such as payments, domain registration and hosting. Sellers see what they need to deliver your order. We do not sell your data.

Cookies

We use only what the site needs to work: a sign-in session so you stay signed in, and a few choices kept in your browser (for example that you closed the cookie notice, or paused an animation). To stop abuse we also set a random device id cookie and keep a hashed form of it and of your connection address with the actions you take (sign up, order, list), for 90 days. When you accept an order we keep a record of the click (time, your connection address, your browser and the words you saw) as evidence in case of a dispute or a chargeback. To see how many people visit and which products and categories they open, we count page opens with a hashed form of your connection address and browser (no cookie, and the address itself is not kept) for 90 days; a browser that sends Global Privacy Control or Do Not Track is not counted. The live chat on public pages is run by Tawk.to: it loads from their servers, sets its own cookies so a conversation carries on between pages, and what you type in it (and any name or email you give) goes to Tawk.to. If you choose "Accept analytics" in the cookie notice, we also load Google Analytics, which sets its own cookies and sends your page views (page address, browser, approximate location from your connection address) to Google so we can see which pages help; it is never loaded before you accept, or for a browser that sends Global Privacy Control or Do Not Track, and you can change your mind by clearing this site's data in your browser. We do not use advertising cookies.

Your choices

You can download a copy of your data and ask us to delete your account on the Your data page. Deleting removes your name, payout details, developer profile and notifications, and locks the sign-in. Payments, orders and accounting records are kept for the time the law requires (usually several years), without a link to your name. We cannot delete while an order, a dispute or a payout is open. You can also ask us to correct your data.

Security