Privacy policy
Privacy is the whole point of a darknet market. Here is exactly what we collect, what we do not collect, and how we protect what we have.
Overview
Nexus Market is a darknet market running on the Tor network. Privacy is not a feature we added on top — it is the reason the market exists. This policy explains what data we process to run the market, what we deliberately do not collect, and how we handle the minimal data we do have.
What we collect and what we do not
We collect: your username, your PGP public key, your account password (stored as a salted hash), your escrow transaction data, your order history and your dispute communications. This is the minimum needed to operate a functioning market.
We do not collect: your real name, your email address, your phone number, your IP address (Tor hides it from us anyway), your physical address, your browser fingerprint, or any analytics data. We do not use tracking scripts. We do not run analytics on the onion site.
How we use data
We use account data to authenticate you, process orders, manage escrow and resolve disputes. We use PGP keys to encrypt sensitive messages and verify your identity for account recovery. We use order history to display your purchases and to calculate vendor commissions. That is it.
We do not use your data for marketing. We do not sell your data. We do not share your data with advertisers. We do not profile users. There is no business model here that involves monetizing your information.
Sharing with third parties
We do not share your data with third parties. We do not respond to law enforcement requests because we do not have data worth requesting — no IPs, no real identities, no logs. If someone serves us a legal demand, there is nothing useful we can hand over. We design the system this way on purpose.
Data retention
We keep order data for 90 days after an order finalizes, in case a dispute needs to be reopened. After that, order records are deleted. We keep dispute records for 180 days. Account data stays as long as your account is active. If you close your account, we delete your data within 30 days except for what is needed in ongoing escrow.
Your rights
You can close your account at any time through the market interface. You can export your order history before closing. You can update your PGP key if you lose the old one (as long as you still have access to your account). Because we do not collect personal data, traditional GDPR-style data requests do not really apply — there is nothing to export beyond what you already see in your account.
Security
Nexus Market runs on distributed Tor infrastructure with no single point of failure. Sensitive data is encrypted at rest. PGP is required for account recovery. Multisig escrow means we never hold full custody of funds. We run a bug bounty program — if you find a vulnerability, report it through the market and we will pay for confirmed issues.
Children's privacy
Nexus Market is for adults only. We do not knowingly allow anyone under 18 to use the market. Because we do not collect age information, we rely on users to follow this rule. If we find out an account belongs to a minor, we close it immediately.
Changes to this policy
If we change this privacy policy, we post the updated version here with a new date. We also sign the update with our PGP key so you can verify it came from us. Major changes get announced on the market homepage and through our official onion mirror channels.
Contact
If you have questions about how we handle privacy, reach out before you create an account.
Data controller: Nexus Market. Privacy requests: [email protected]. Related documents: terms of service.