Privacy Policy

What we collect

Your name, username, email, (optional) phone number and shipping address; your bids and purchases; and, for security, sign-in records (IP address and time).

How we protect it

• Passwords are stored as one-way hashes — not even we can read them.
• Your address, phone and company details are encrypted (AES) in our database.
• Card details never reach our servers; payments are processed directly by PayPal.
• We use two-factor authentication, sign-in attempt limits and secure session cookies.

Fraud prevention

To stop fake accounts and bots we allow one account per person. When you register we store your IP address (encrypted) and a random device-ID cookie in your browser. To detect VPNs, proxies and Tor, your IP address is checked with proxycheck.io and against the Tor Project’s public exit-node list.

Sharing

We never sell your data. We only share what’s needed for payment (PayPal) and shipping with those providers.

Your rights

You can view and correct your details in Account Settings. To request deletion of your account, email support@crateauction.com.

Cookies

We only use cookies that are necessary to keep you signed in, remember your language and prevent fake accounts (device ID). No advertising or tracking cookies.