PRIVACY · VERSION 2026-10-07

Privacy Notice

This notice explains how the operator identified in the Legal Notice acts as controller for personal data processed through THE WALL. It is intended to provide the information required by applicable data-protection law, including the GDPR where it applies.

1. Data we process

We may process account email addresses and display names; claim coordinates and ownership/provenance records; advertisements, images and contact details that users choose to publish; marketplace listings, orders, seller/buyer identifiers and transaction references; Stripe connected-account identifiers and capability status; refund, dispute and reconciliation records; legal-consent records; content reports; support communications; and security/technical data such as timestamps, hashed IP addresses, hashed user-agent identifiers, session/security events and request metadata. Where Analytics Pro is active for a claim, we also process first-party interaction events such as qualified ad impressions, clicks, traffic source, coarse country code when supplied by the hosting/proxy layer, and MicroWall cell interactions. Analytics Pro events are not stored for free/non-entitled claims. Raw IP addresses are not stored in the Analytics Pro event table. Where WallGuard is active, we also process the public destination/media URLs attached to that entitled claim and technical availability metadata such as HTTP status, redirect count, response time, content type and check timestamps.

2. Purposes and legal bases

We process data to perform contracts and provide claims, advertising, marketplace transfers and account access; to comply with legal, accounting, tax, fraud-prevention, consumer-protection and payment obligations; to establish, exercise or defend legal claims; to secure the platform and prevent abuse based on our legitimate interests; and, where required, on the basis of consent.

3. Payments

Stripe processes payment-card and payout information under its own privacy terms and payment-services role. THE WALL does not need to store complete card numbers. We store identifiers and financial metadata needed to verify payments, transfers, refunds, disputes, fees and ownership changes.

4. Public information

Live advertisements, selected contact details, claim coordinates, claim provenance and seller display names may be visible publicly. Do not publish personal data that you do not want displayed or that you are not authorised to disclose.

5. Recipients

Data may be disclosed to payment processors such as Stripe; hosting, infrastructure, email and security providers; professional advisers; public authorities where legally required; counterparties where necessary to complete or investigate a marketplace transaction; and service providers acting under contractual data-protection obligations. We do not sell personal data to advertisers.

6. International transfers

Some service providers may process data outside Greece or the EEA. Where GDPR transfer restrictions apply, transfers are made using an applicable adequacy decision, standard contractual clauses or another lawful transfer mechanism.

7. Retention

We keep data only as long as reasonably necessary for the purposes described above. Claim provenance, transaction, accounting, refund and dispute records may be retained for applicable statutory, audit and limitation periods. Security and consent evidence may be retained for as long as needed to establish account integrity, enforce agreements or defend legal claims. Public ad content may be archived after expiry where required for moderation, dispute or provenance evidence. Analytics Pro event data is configured for a rolling retention period, currently 180 days, unless a shorter or longer period is required for security, legal or operational reasons. WallGuard keeps current check state and issue/recovery history for the entitled claim for operational troubleshooting and alerting.

8. Your rights

Depending on applicable law, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. These rights can be limited where retention or processing is required for legal obligations, fraud prevention, payment records, legal claims or the rights of others.

Requests should be sent to the privacy contact listed in the Legal Notice. If GDPR applies, you may also lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority.

9. Automated processing

THE WALL may use automated technical rules to detect collisions, expired reservations, payment state, suspicious sessions, duplicate webhooks, prohibited file types or moderation signals. Material ownership changes and payment reversals are designed to require verified payment state and, in sensitive reversal cases, administrative controls. We do not intentionally make solely automated decisions producing legal or similarly significant effects except where permitted by law and with required safeguards.

10. Security

We use measures such as HTTPS, secure cookies, session timeouts, CSRF protection, webhook signature verification, payment-state reconciliation, hashed security identifiers and access controls. No internet system can guarantee absolute security.

11. Children

THE WALL is not intended for persons under 18. Do not create an account or transact if you are under 18.

12. Cookies, session identifiers and analytics

We use essential session and security technologies required for authentication, preferences and checkout. Analytics Pro does not create a separate persistent analytics cookie: it reuses the existing first-party session identifier only to deduplicate events within a session, and stores only a one-way keyed hash of that identifier. We respect Global Privacy Control and Do Not Track signals by suppressing Analytics Pro event collection where detected. Stripe and other payment providers may set their own cookies or similar technologies during hosted checkout or onboarding. Any future non-essential analytics or advertising cookies should be subject to any consent mechanism required by law.