Maresee Policy

Privacy Policy

Last updated: 5 August 2026

This Privacy Policy explains how Maresee (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use our website at maresee.com and related services (the “Platform”). Maresee is a second-hand fashion marketplace where people can browse, buy, sell, message, and manage orders.

By creating an account or using the Platform, you acknowledge this Privacy Policy. If you do not agree, please do not use the Platform.

1. Who is responsible for your data

The data controller responsible for your personal data is:

Maresee LTD
Email: maresee.official@gmail.com

If you have questions about this Privacy Policy or how we handle your data, contact us at the email above.

2. What personal data we collect

We collect personal data in the following ways:

2.1 Information you provide directly

Account registration and profile: username, email address, password (stored in hashed form), first name, surname, optional gender, phone number, delivery address (address lines, city, postal code, country), and profile photo.
Google sign-in: if you register or sign in with Google, we receive information from Google such as your name, email address, and profile picture to create and secure your account.
Listings: item title, description, photos, price, condition, category, and other listing details you submit as a seller.
Orders and checkout: shipping full name, shipping address, phone number, selected ACS pickup location (where applicable), and order details such as items purchased, prices, fees, and totals.
Messages: content of messages you send to other users through the Platform’s messaging feature.
Favourites: listings you save to your favourites list.
Contact form: name, email address, and message content when you contact us.
Seller payout setup: if you sell on Maresee, Stripe may collect identity, banking, and verification information from you directly during Stripe Connect onboarding. We store related account status information (such as Stripe account ID and payout readiness) to operate the marketplace.

2.2 Information collected automatically

Session and account cookies: authentication tokens and account-setup indicators needed to keep you signed in and complete onboarding.
Cookie consent choice: your preferences for optional cookies (stored in a cookie and browser storage) when you use our consent banner or “Cookie settings”.
Theme preference: your light/dark theme choice, stored in a cookie and/or browser storage when you allow preference cookies.
Shopping cart: while signed in, items in your cart may be stored locally in your browser (local storage) under a key linked to your account.
Security data: when reCAPTCHA is enabled, Google may process technical information (such as IP address and interaction signals) to help protect registration, login, password reset, and contact forms from abuse.
Advertising data: if you accept advertising cookies through our consent banner, Google AdSense may set cookies and process online identifiers and usage data to serve and measure ads.
Technical and service logs: basic technical information generated when you use the Platform, such as request logs needed to operate, secure, and troubleshoot the service.

3. How we use your personal data

We use personal data to:

create and manage your account, including email confirmation and password reset;
let you browse listings, buy and sell items, and manage your profile;
process orders, calculate totals and fees, and provide order status updates;
arrange delivery through ACS Cyprus pickup/shipping services where applicable;
process payments through Stripe and seller payouts through Stripe Connect;
send transactional emails (for example account confirmation, password reset, and order receipts) through Brevo;
enable messaging between buyers and sellers, including real-time message delivery;
display public seller profiles and published listings to other users;
prevent fraud, abuse, and unauthorised access, including through reCAPTCHA;
show advertisements on the Platform where permitted and where you have given consent;
remember optional site preferences where you have given consent;
respond to contact requests and support enquiries;
comply with legal obligations and enforce our terms.

Important: we use your account and profile information to operate the marketplace. We do not sell your personal data. We do not use your account profile data for third-party advertising. Advertising, where shown, is provided through Google AdSense under a separate consent flow and is not based on selling your account data to advertisers.

4. Legal bases for processing (EEA/UK users)

Where applicable under the GDPR, we rely on the following legal bases:

Contract: to provide the Platform, process orders, enable selling and payouts, and deliver core marketplace features you request.
Legitimate interests: to secure the Platform, prevent abuse, improve reliability, handle support requests, and operate the marketplace fairly. We balance these interests against your rights.
Legal obligation: where we must retain or disclose data to comply with law, tax, or regulatory requirements.
Consent: for non-essential cookies (preferences and advertising) and where consent is required for specific processing. You can withdraw consent at any time using Cookie settings in the site footer or by clearing cookies in your browser.

5. Cookies, browser storage, and scripts

We use cookies, browser storage (such as local storage), and third-party scripts to run the Platform. Cookies are grouped below by purpose.

5.1 Essential cookies (always active)

These are required for core functionality such as sign-in, checkout, and security. They do not require consent.

maresee_jwt — keeps you signed in (HTTP-only session cookie).
maresee_account_setup — indicates that required account setup steps are pending.
maresee_google_oauth_state — temporary cookie used during Google sign-in to prevent login abuse (deleted after sign-in completes).

5.2 Preference cookies and storage (optional — consent required)

Used only if you accept preference cookies in our consent banner or save that choice in Cookie settings.

maresee-theme — remembers your light/dark theme (cookie and/or browser storage).
maresee_consent — stores your cookie consent choices (cookie).
maresee_cookie_consent — backup copy of your consent choices (browser storage).
maresee_cart:<user id> — stores your signed-in shopping cart between visits (browser storage).

5.3 Advertising cookies and scripts (optional — consent required)

Used only if you accept advertising cookies. We do not load advertising scripts until you consent.

Google Consent Mode defaults — before any ad script runs, we signal to Google that ad-related storage is denied until you consent.
Google AdSense (pagead2.googlesyndication.com) — serves ads on selected pages. Google may set advertising cookies and process online identifiers according to its policies.
Google advertising cookies — cookies set by Google when ads are shown (names and duration are controlled by Google).

5.4 Security scripts (essential / legitimate interest)

Google reCAPTCHA v3 — loaded when enabled to protect registration, login, password reset, and contact forms. Google may process technical data such as IP address and device signals. See Google’s Privacy Policy.

5.5 Other third-party services

These services are loaded when you use the related feature (not for advertising):

Stripe — payment and seller payout flows (hosted by Stripe or embedded components).
Google OAuth — if you choose “Sign in with Google”.
Real-time messaging — WebSocket connection to our servers for in-app messages.

5.6 Managing cookies

When you first visit Maresee (or after clearing cookies), you may see our cookie banner with these options:

Accept all — enables preference and advertising cookies/scripts.
Reject non-essential — only essential cookies and security features remain active; ads are not loaded.
Manage preferences — choose categories individually.

You can change your choice at any time using Cookie settings in the site footer. Blocking essential cookies may prevent parts of the Platform from working.

6. Advertising

Maresee may display third-party advertisements provided by Google AdSense on certain pages. Ads are shown only when advertising is enabled on the Platform and, where required by law, after you accept advertising cookies in our consent banner.

We use Google Consent Mode so that ad-related storage remains denied until you consent. Google may collect and use information according to its own policies. For more information, see:

Our ads.txt file is published at maresee.com/ads.txt.

7. How we share personal data

We share personal data only as needed to operate the Platform:

Other users: your public seller profile (such as username, name, city/country, profile photo, and published listings) is visible to other users. Buyers and sellers may see information needed to complete a transaction or conversation.
Stripe: payment processing and seller payouts.
ACS: shipping and pickup services in Cyprus.
Brevo: transactional email delivery.
Google: sign-in (OAuth), reCAPTCHA fraud prevention, and advertising through AdSense (where you have consented).
Infrastructure providers: hosting and service providers that help us run the website and backend systems.
Legal and safety: regulators, courts, or law enforcement when required by law or to protect rights, safety, and security.

We require service providers to handle personal data only for the purposes described in this policy and subject to appropriate safeguards, where applicable.

8. International data transfers

Some of our service providers may process personal data outside your country, including outside the European Economic Area (EEA). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by those providers.

9. How long we keep personal data

We retain personal data only for as long as necessary for the purposes described in this policy, including:

Account data: while your account is active and for a reasonable period afterward if you delete your account or request erasure, unless longer retention is required by law.
Order and transaction records: for the period needed for accounting, tax, dispute resolution, and legal compliance.
Messages: while your account remains active and as needed to provide the messaging service and handle disputes.
Contact requests: for as long as needed to respond and maintain support records.
Cookie consent records: for up to 12 months, or until you change or withdraw your choice.
Security and server logs: for a limited period appropriate for security monitoring and troubleshooting.

10. Security

We use administrative, technical, and organisational measures designed to protect personal data, including secure authentication cookies, access controls, and reputable payment and email providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on your location, you may have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request deletion of your data;
restrict or object to certain processing;
request data portability;
withdraw consent where processing is based on consent;
lodge a complaint with your local data protection authority.

To exercise these rights, email maresee.official@gmail.com. We may need to verify your identity before responding.

If you are in the EEA and believe we are processing your data unlawfully, you may contact the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority.

12. Children

Maresee is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the Platform where appropriate. If we change how we use cookies in a material way, we may ask you to review your consent again.

14. Contact us

If you have questions about this Privacy Policy or our data practices, contact:

Maresee LTD
Email: maresee.official@gmail.com
Website: https://maresee.com