This document has not been written yet, and this page is not published.
The privacy notice in the design (Figma 152:114325) is generic third-party boilerplate: it points at site.com and info@info.com, names PayPal and Stripe as the processors that store payment data, and gives a postal address in Dubai. None of that is true of Harajcom, and a privacy notice is a binding statement about what a real company does with real people's data.
So the text was deliberately not copied here. The row exists with is_published = false so the page 404s until the operator's own notice replaces this file.
What the notice has to cover, from what the code actually does today:
- Account data collected at registration: first and last name, username, email
or phone, password, locale, marketing opt-in.
- Login devices: IP address, user agent, and last-active time, kept for the
window the account security screen shows.
- Ads, coupons, negotiations and messages the user writes, and the images
they upload.
- reCAPTCHA on the auth screens, which sends the request to Google.
- Social login, when used, which receives profile data from the provider.
Last updated: 10/3/2026