Privacy Policy

Last updated: 7 October 2026

This policy is a plain-language overview of how BidArch handles personal data and online privacy. The detailed controller information, legal bases, retention rules, recipients and data-subject rights are in our GDPR Data Protection Notice.

Information we handle

  • Account, identity, contact and verification information.
  • Listings, bids, purchases, invoices, payments, delivery and correspondence.
  • Security and device data such as IP address, browser, timestamps and audit logs.
  • Optional analytics and advertising signals only after valid consent where required.

Why we use it

  • To create accounts and perform marketplace and sales contracts.
  • To process invoices, payments, delivery, complaints and returns.
  • To meet tax, accounting, consumer-protection and lawful-request obligations.
  • To secure the service, prevent fraud and establish or defend legal claims.
  • For optional analytics or marketing where you have consented.

Cookies and similar technologies

Strictly necessary session, security and preference storage operates without optional consent where legally permitted. Analytics and advertising technologies remain blocked until consent. Cookie Settings in the footer lets you reject or withdraw optional consent at any time without affecting core service access.

Sharing

Data is not sold. It may be disclosed to the relevant seller or auction house, payment, hosting, email, identity-verification and delivery providers, professional advisers, or public authorities where a lawful basis exists. Processors are limited by contract and access controls.

International transfers

Where data leaves the European Economic Area, BidArch will use an applicable adequacy decision or safeguards such as approved Standard Contractual Clauses and supplementary measures where required.

Security and children

BidArch uses access controls, encrypted transport, protected credentials, audit records and backups appropriate to risk. The transactional service is for adults aged 18 or over.

Your choices

You can change optional cookie consent in the footer and exercise GDPR rights by emailing info@bidarch.com. You may also complain to the competent supervisory authority. See the detailed notice for the complete process.

BidArch mobile app

Account. To use the app you create an account with your email address, name and (optionally) country, or you sign in with Apple or Google. We use these to run your account, verify your email and reset your password.

Coin photos. When you identify a coin, the photo is reduced in size and stripped of EXIF and location data on your device, then sent to our servers over an encrypted connection. We compute a numerical description of the image (an "embedding") to search for similar auction lots. We do not store your photo. We keep the embedding and the list of matching lots as your search history, so you can reopen past searches and, if you are a member, receive alerts about new similar lots. Searches are kept for 30 days and then deleted automatically, except searches you have set an alert on, which are kept until you delete the alert. You can delete one search or your whole history at any time; deleting your account deletes all of it.

Saved lots, alerts and devices. We store the lots you save, the alerts you create and, if you allow notifications, a push token for your device. We also store a random identifier for each installation to keep you signed in on that device.

Advertising. Free accounts may see ads labelled "Sponsored". Members do not see ads.

  • Ads sold directly by BidArch are served from our own servers. We count how often each ad is displayed and tapped. These counts are not linked to your account.
  • Google AdMob may show ads when no direct ad is available, once we switch it on. We request non-personalised ads. Google's SDK processes your IP address (to estimate an approximate location), device and advertising identifiers, interactions with ads and diagnostic data for advertising, analytics and fraud prevention. See policies.google.com/technologies/partner-sites. You can reset or delete your advertising identifier in your device settings.

Crash reports. If enabled, crash reports are sent without personal data.

Payments. In-app membership purchases are not available yet. When they open, purchases will be processed by Apple or Google and our subscription provider; we do not receive your card details.

Deleting your account. In the app: Profile > Delete account. Or follow the steps at www.bidarch.com/account-deletion. Deletion removes your account, search history, saved lots, alerts, devices and sessions. Records we must keep by law (such as invoices) are kept as described in this policy.