Privacy Policy

Launch Locker ("we", "us", "our") operates a curated marketplace that helps sellers and buyers connect about websites, web apps, templates, and similar digital projects ("Listings"). We make introductions only. We do not process payments, hold funds, or provide escrow.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your choices. UK data protection is governed by the UK GDPR and the Data Protection Act 2018. (GOV.UK)

1) Who is responsible for your data

Launch Locker is the controller of personal data processed through our website and services.

For questions, please use the contact page on our website.

2) What we collect

We collect information you provide directly, information generated through your use of the site, and limited technical data to keep the service secure.

A) If you submit a project to sell

When you apply via the "Sell your website" form, we may collect:

• Project details you submit (project name, type, demo link, one line pitch, stage, price range, currency, optional category and notes)
• Your contact details (such as email address)
• Your ownership confirmation (that you can sell the project)

B) If your submission is accepted and you complete a full listing

We may collect:

• Full listing content (description, features, "what's included", handover readiness)
• Screenshots and other media you upload
• Private seller contact details you choose to provide for buyer contact unlocking (contact email and optional contact link and notes)
• Optional go to market handoff details (persona ideas, channel ideas, pricing idea, next steps)

Important: Please do not upload screenshots or content containing sensitive personal information. If you include personal data in screenshots, you are responsible for ensuring you have the right to share it.

C) If you request contact details for a listing (buyers)

We may collect:

• Your name
• Your email address
• Your message to the seller ("intent")
• NDA acceptance timestamp if the seller requires an NDA

D) If a seller accepts or declines a buyer request

We may process:

• The seller's decision (accepted or declined)
• Timestamps and secure token status used to complete the decision flow
• The buyer contact unlock status

E) Communications and support

If you contact us, we may collect:

• The content of your message
• Any information you choose to provide
• Logs needed to resolve issues

F) Technical and usage data

To operate and protect the site, we may collect:

• IP address (often stored in logs)
• Device and browser information (user agent)
• Referral page (where available)
• Basic event data (page views, clicks, errors), depending on the analytics tools we use
• Anti spam signals such as a hidden form field (honeypot) and rate limiting events

3) How we use your data and our lawful bases

The UK GDPR requires us to have a lawful basis for processing personal data and to tell you how and why we use it. (ICO)

We use personal data for:

A) Providing the marketplace service

• Receiving and reviewing submissions
• Publishing and displaying listings
• Enabling buyers to request contact details
• Sending emails related to submissions, listing completion links, and intro outcomes

Lawful basis: performance of a contract (providing the service you request) and legitimate interests (running a curated marketplace).

B) Curation and quality control

• Reviewing submissions and listings for quality and clarity
• Requesting edits before publishing
• Preventing duplicate or spam submissions

Lawful basis: legitimate interests.

C) Safety, security, and fraud prevention

• Protecting the service against spam and abuse
• Investigating suspicious activity
• Maintaining audit logs of key actions (for example, token usage events)

Lawful basis: legitimate interests and, where applicable, compliance with legal obligations.

D) Improving the product

• Understanding how people use the site
• Fixing bugs and improving performance

Lawful basis: legitimate interests.

E) Marketing (if you opt in where required)

• Sending updates or newsletters (only where we have a lawful basis to do so)
• Measuring engagement

Lawful basis: consent or legitimate interests, depending on the specific activity and local requirements.

4) What is public vs private on Launch Locker

Public information

Published listings can be viewed by anyone. Public listing content may include:

• Project title, tagline, description, features
• Screenshots and media you upload
• Stage and price information
• Included assets and handover readiness signals

Private information

We treat these as private and do not display them publicly:

• Seller contact details (contact email, contact link, contact notes)
• Buyer personal details and messages
• Private links intended for serious buyers (if you provide them)
• NDA acceptance records and token records

How introductions work (contact unlocking)

• A buyer requests contact details by submitting their name, email, and message.
• We send that request to the seller.
• If the seller accepts, we provide the seller's contact details to the buyer through a secure unlock flow.
• If the seller declines, we notify the buyer that the request was declined.

We do not take a cut of any deal, process payments, or provide escrow. Any negotiation and transaction happens directly between buyer and seller.

5) Currency conversion and pricing display

Listings may display an asking price or price range set by the seller in their chosen currency. Buyers may see approximate conversions for convenience.

For exchange rates, we may use the Frankfurter API to fetch currency rates. The Frankfurter API states it does not collect personal data itself, though its public deployment may run behind Cloudflare, which may collect some basic information. (Frankfurter)

We store rates to show approximate conversions and to support filtering and sorting. We do not send your personal data to the currency rates provider as part of routine conversion requests.

6) Who we share data with

We share personal data only when necessary to run Launch Locker, including with:

• Email delivery providers to send submission confirmations, listing completion links, and intro request messages
• Hosting and infrastructure providers to host the website and store data
• Analytics providers (if enabled) to understand usage and improve the product
• Security and anti abuse tools to reduce spam and protect the service
• Professional advisers (legal, accounting) when needed
• Authorities if required by law or to protect rights and safety

We do not sell your personal data.

7) International transfers

Our service providers may process personal data outside the UK. Where this happens, we aim to use appropriate safeguards, such as contractual protections and other measures required by applicable data protection law.

8) Data retention

We keep personal data only as long as needed for the purposes described above, including legal, security, and dispute needs. Typical retention periods:

• Submissions: kept while under review, then retained for a reasonable period to manage follow ups, prevent abuse, and maintain records.
• Published listings: kept while live, then retained for a reasonable period after being removed for audit, safety, and support.
• Intro requests: retained to manage the intro flow, maintain records of acceptance or decline, and prevent spam.
• Tokens and security logs: retained for shorter periods where possible and longer where needed for security and fraud prevention.
• Support messages: retained as needed to resolve issues and maintain records.

You can ask us to delete your data where applicable. See the "Your rights" section below.

9) Security

We use reasonable technical and organisational measures designed to protect your data. No internet service can be guaranteed 100% secure. Please use strong passwords for any services you link to and avoid sharing sensitive data through forms or screenshots.

10) Your rights

You may have rights under UK GDPR, including rights to be informed, access, rectification, erasure, restriction, portability, objection, and rights related to automated decision making where applicable. (ICO)

To exercise your rights, please use our contact page. We may need to verify your identity before responding.

You also have the right to complain to the UK Information Commissioner's Office (ICO). (ICO)

11) Cookies and similar technologies

We may use cookies and similar technologies for:

• Essential site operation and security
• Remembering preferences like selected currency
• Analytics (if enabled)

Where required, we will request consent for non essential cookies.

12) Children

Launch Locker is not intended for children, and we do not knowingly collect personal data from children.

13) Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date and, where appropriate, provide additional notice on the website.

14) Contact us

If you have questions about this policy or how we handle personal data, please visit our contact page.