Privacy Policy

Welcome to LaLaLista! Your privacy is important to us. This page explains what information we collect, why, for how long, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR).

1. Data Minimization: We Only Collect What Is Essential

We deliberately keep data collection to the minimum needed to operate a free classifieds board. We do not run analytics or tracking scripts, do not build advertising profiles of visitors, and do not use any AI on your data. Specifically, we collect:

Account data — username, email address, and password hash (if you register), needed to let you post and manage Ads.
Ad content — the title, text, images, category, department, country, and any contact details (phone/email/chat link) you choose to include in an Ad, needed to publish and display it.
Essential technical/security data — your IP address and session information, needed to keep the site secure, prevent abuse, and keep you logged in.
Payment data — if you buy a Sponsored Ad or Banner Ad, payment is processed directly by Stripe; we do not receive or store your card details, only confirmation that a payment succeeded.

2. Legal Basis for Processing

We process this data on the following legal bases: performance of a contract (providing the service you asked for by posting/browsing Ads), our legitimate interest in keeping the Platform secure and functioning, and, where applicable, your consent (e.g. the cookie/data notice) or compliance with a legal obligation.

3. How Long We Keep Data

Regular Ads are automatically deleted after 30 days (sooner if they receive enough dislikes — see the site's posting rules). Paid Ads are kept for the duration of their promotion period. Account data is kept for as long as your account exists; you can delete your account and its data at any time — see Section 6 below.

4. Cookies and Local Storage

We use only essential cookies to maintain sessions and protect security (like sessionid and csrftoken), and a small amount of local browser storage purely to remember that you've dismissed an on-site notice. No tracking or analytics cookies are used, and no advertising/profiling cookies are set. No personal data is sent to third-party trackers.

5. Data Sharing

We do not sell your data. We do not share it with third parties except: (a) a payment processor (Stripe) when you make a payment, strictly to process that payment, and (b) where required by law.

6. Your Rights

Under the GDPR (and similar laws elsewhere), you have the right to:

Access the personal data we hold about you;
Rectify inaccurate data (e.g. by editing or re-posting an Ad);
Erase your data — you can permanently delete your account yourself at any time, which removes your account, your Ads, and your votes;
Object to or restrict certain processing;
Data portability, where technically feasible;
Lodge a complaint with your local data protection authority.

To exercise any right that isn't self-service (like account deletion), contact us — see Section 8.

7. User Responsibilities

By using LaLaLista, you confirm that you are responsible for any content you post. Do not share sensitive personal information (yours or anyone else's) in an Ad — Ads are public.

8. Contact

If you have questions about privacy or want to exercise a data right, contact us via our Contact page.

9. Changes to this Policy

We may update this privacy policy occasionally. Please check this page periodically.