Privacy Policy
Effective date: 2026-05-24. Version 1.0.
Contents
Who we are What data we collect Why we do this Who we share it with How long we keep it Your rights Cookies Security ChangesWho we are
Libermall ID — a unified identity service, operator of the Libermall ecosystem. Privacy contact: [email protected].
What data we collect
- Identifiers: Telegram user ID, TON wallet address (if linked), email (if provided), Apple ID, Google ID
- Profile: first name, last name, avatar (from Telegram Login Widget or social providers)
- Sessions and activity: sign-in time, IP address for rate limiting, history of linking/unlinking services
- Consents: which ecosystem services you have granted data sharing to
Why we do this
- Authenticate you and keep your session active
- Pass the minimum required data to the service you have authorized
- Protect your account from compromise (rate limiting, anomaly detection)
- Meet legal requirements (e.g. log retention)
Who we share data with
Only with Libermall ecosystem services you have explicitly authorized via an OAuth consent screen. Only claims matching the requested scopes are shared (e.g. email only if you granted the email scope).
We do not share data with third parties except where required by law.
How long we keep it
- Your account — until you delete it
- Sign-in audit log — 12 months
- Linked wallets — until you unlink them
- Database backups — 14-day rolling backup
Your rights
- Request an export of all data about you (GDPR Article 15)
- Correct inaccurate data
- Delete your account and related data (right to be forgotten)
- Revoke consent for a specific service
Any request — [email protected], we will respond within 30 days.
Cookies
We use only functional cookies to keep your session alive. No analytics or third-party tracking on id.libermall.com.
Security
- HTTPS-only (Let's Encrypt SSL)
- JWT tokens signed with RS256 (4096-bit key)
- Passwords (if any) — bcrypt + salt
- 2FA via TOTP and WebAuthn (passkeys)
- Isolated VPS, only ports 22/80/443 open
Changes
All changes are posted on this page with an updated date. Material changes — notification via email/Telegram.
Questions: [email protected]