Privacy Policy

About this policy

This policy explains how BukaSosa handles information when you browse, register, publish listings or contact sellers on our Timor-Leste marketplace. The operator and contact details appear below.

Information we handle

We store your name, email, hashed password, optional phone number, profile text and language preference; listing descriptions, prices, photos and selected locations; favorites, conversations, messages, reports and notifications. We also process session identifiers, IP addresses and request information for security, rate limiting and troubleshooting, and aggregate listing-view counts.

Why we use it and who can see it

We use information to provide accounts, publish and search listings, deliver messages and account emails, prevent abuse and moderate content. Public listings, photos, seller names and public profile details can be seen by visitors and search engines. Your account email and phone are not included in public listing responses. Anything you put in a public description or photo is public. Messages are available to participants and authorized administrators for moderation; they are not end-to-end encrypted. Administrative message inspections are logged.

Service providers

Our hosting provider, Hetzner, stores the application data. Cloudflare processes requests for network protection and Turnstile security checks. Mailgun processes recipient addresses and account-email content for delivery. These providers may process data outside Timor-Leste under their own applicable terms and privacy notices. We may disclose relevant records when legally required or necessary to investigate abuse and protect users.

Cookies and browser choices

We use session and CSRF cookies for sign-in and security, and a language cookie to remember your preference for up to one year. Cloudflare security services may use browser storage or cookies. Blocking these may prevent sign-in or security checks. We have not added advertising trackers to the application.

Storage, retention and security

We use HTTPS, password hashing and access controls. Account deletion automatically removes personal profiles, uploads, sent-message content and linked Firebase identities from active systems. Shared transactions and minimal audit records are anonymized; other participants keep their own messages. Confirmation email addresses are encrypted until delivery. Restricted recovery backups may retain older copies until destroyed. Follow the deletion and retention details at /account-deletion; contact support for requests about third-party content or backup retention.

Your choices and requests

You can edit supported profile fields, remove favorites and manage listings in your account. Use the contact below to request access, correction, account closure or deletion, or raise a privacy concern. We may ask for proportionate proof of account ownership. Do not send passwords or authenticator codes. We explain any applicable retention limits when handling your request. Changes to this policy will appear here with an updated date.

Google & Firebase · 2026-10-02

Optional Google sign-in shares your Google account identifier, verified email and name with BukaSosa to create or link your account. Optional Firebase Cloud Messaging processes browser device tokens and delivers generic account alerts; message contents are not included. Tokens expire after seven days without renewal and are removed on sign-out for that session, password change or suspension. Google Analytics runs only after you allow it, measures public page types, and may process usage data outside Timor-Leste. We do not intentionally send account email, messages, search terms or listing titles to Analytics. Change Analytics consent using Privacy preferences in the footer, and notifications in your profile or browser settings. Google’s privacy policy applies to its processing.

Identity verification · 2026-10-15

I consent to private identity review. Documents and legal name are encrypted, accessible only to authorized reviewers, and deleted after a decision or after 30 days without review. The verification result is retained.

Questions, privacy requests and appeals

Request account deletion · 2026-10-24

Deletion process and retained data: Request account deletion