Privacy Policy for Bladesmiths Network
Last updated: 21 October 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy has been created with the help of the Privacy Policy Generator. It is a draft that a solicitor will review before the Service opens to the public.
Who We Are
Bladesmiths.net is the controller of Your Personal Data: We decide how and why it is used. Full operator details, including a postal address, will be published when the Service launches. For now, You can reach Us at [email protected].
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Bladesmiths.net.
- Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- Country refers to: United Kingdom
- Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
- Personal Data is any information that relates to an identified or identifiable individual.
- Service refers to the Website.
- Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
- Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Website refers to Bladesmiths.net, accessible from https://bladesmiths.net/
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address, and a password (kept only in scrambled, hashed form) if You use one
- Username, and a display name if You choose to give one
- Birth month and year, and where You are if You choose to say: Your country, and the region and town You add (a town is shown on Your public profile only if You add it)
- Whether You are online: We show other members a green dot on Your picture while You are using the site, unless You switch that off in Settings (our administrators can still see that You are online)
- What You post: photos, short videos, posts, comments, Messageboard threads and replies, Hangout messages, direct messages, Your profile, and Your follows, likes, saves and reposts
- Marketplace listings You make: the title, description, price, kind of item, details such as steel and handle, the country it is sold from, and its pictures. Anyone can see a listing, with or without an account, and it can appear in search engines; who the seller is is shown only to members old enough to contact them
- Events a business posts: the title, description, host, time, address, map position and picture. An event page can be seen by anyone, with or without an account, and can appear in search engines; the replies and who is going are for members
- If You press Confirm Age: the date You were confirmed (see “Age Confirmation (Agemin)” below)
- Which posts and events You have seen: We count which posts and events You have seen so authors and event hosts can see how many members saw theirs (never who) and, for posts, We can show You more of what interests You. The record is deleted with Your Account
- Reports You make about other members’ content, and notices We send You
- If You turn on notifications on a device: that device’s push address and keys (see “Notifications on Your Device” below)
- Usage Data, only if You accept analytics cookies (see below)
Usage Data
Usage Data is collected via Google Analytics, but only if You press Accept on our cookie notice, and only on the live Bladesmiths.net website (never on test or development copies). If You decline, or do not choose, no Analytics information is collected.
Signing In With Google
If You sign in or sign up with Google, Google shares Your email address and Your name with Us, and a code that identifies Your account with them. We use them to create and recognise Your Account here. We do not receive Your password for that service. If You start signing up this way and do not finish, We delete the unfinished sign-up after 7 days.
Two-Step Sign-In
If You switch on two-step sign-in (it is always on for moderators and administrators), We email a six digit code to the address on Your Account each time You sign in with Your password. The code is sent through Our email provider, works once, and expires after 10 minutes. We never store the code itself, only a scrambled (hashed) form of it that lets Us check what You type.
Notifications on Your Device
Notifications are on by default once You allow them on a device: Your browser always asks You first, and until You do We store nothing. When You allow it (in Settings), We store that device’s push address: a web address and two keys that Your browser gives Us, with no name and no other detail about You, and a short label such as “Chrome on Android”. We use it only to send You BSN notifications, and We send each one through Your browser’s push service, which is run by Google, Apple or Mozilla depending on Your browser. A notification says who did something and what kind of thing it was, such as a reply or a moderator notice, and never the words of Your posts or messages. You can turn notifications off at any time in Settings, which deletes this device’s address and stops notifications to all Your devices, and it is also deleted if the push service says it no longer works or if You delete Your Account.
Security Records
To protect Accounts from people guessing passwords, We briefly keep a record of failed sign-in attempts: the name or email address that was tried and a scrambled (hashed) form of the visitor’s IP address, not the address itself. These records are deleted after a short time. Sessions that keep You signed in also store hashed forms of Your IP address and browser details, and are deleted when they expire or when You sign out.
Moderation Log
Our moderators and administrators act through tools that keep an audit log of what they do (for example removing a post, deciding a report, suspending or banning a member, or changing a member’s role). Each entry holds the username of the member who acted, what was done, the username of the member it was done to, the time, and a short note. We keep these entries so that We can show that decisions were fair and deal with disputes. They hold only a username and are kept even after an Account is deleted.
Direct Messages
Signed-in members can send each other direct messages: private, one-to-one conversations in plain text. We store each conversation (which two members it is between, and who wrote first), each message (who sent it, the text and when) and, for each member, what they have read and whether they deleted the conversation from their own inbox. If a member does not follow You, their first message reaches You as a message request that You can accept, decline or block; We do not tell them if You decline.
Direct messages are not end-to-end encrypted. They are stored on Our servers like the rest of the Service, and the people who run the Service could technically read them. As a rule We do not: Our moderators can read a direct message only when a member reports it. Reporting a message lets Our moderators read that message and up to five messages before it in that conversation, and nothing else in it. We keep a copy of those messages with the report, in the same restricted archive described below. A moderator’s decision is recorded in the moderation log without the words of the message. We may also read or keep messages where the law requires it (see “Disclosure of Your Personal Data” below).
A message that You delete disappears for You and for the other member, but We keep a copy of it, with the usernames and the time, in a restricted archive. When an account is deleted We do the same with every message in the conversations that account was in, because those conversations can no longer be kept on the Service. This archive is used only to investigate abuse and to establish, exercise or defend legal claims. It can be read only by the Service’s administrators, every time it is read is recorded, and it is kept for 12 months, or longer where needed for an open investigation or legal claim. The copy is not shown to members.
You can delete a message You sent: it is hidden from both of You and shows as deleted (see the archive above). You can delete a conversation for Yourself only: it leaves Your inbox and Your copy is cleared, but the other member keeps theirs. Direct messages stay in a conversation until You or the other member delete them. If You delete Your Account, the conversations You were in disappear from the Service, including for the other member, and every message in them is moved to the restricted archive. When You ask for a copy of Your data, it includes the messages You sent, including ones You deleted, and the messages You received, with the other member’s username and the text. A notification about a message, on the site or on Your device, says who wrote and never the words of the message.
Reports and Moderation
Any signed-in member can report a post, comment, thread, reply, Marketplace listing, Hangout message, direct message or member. We keep the report (who made it, what it is about, the reason chosen and any note), the time it was made, the decision and the time it was decided. A report with a serious reason hides the content from everyone except its author and Our moderators until a moderator decides. Moderation is done by people; We do not use automated decision-making that affects You.
Appeals
If You appeal a moderator’s decision (about Your content, or a suspension or ban), We keep the appeal: what You wrote, when, which decision it is about, the moderator who answered, Our written answer and the time. If You cannot sign in, You appeal with a form that asks for Your username or email address and a message; the form always gives the same reply, so it cannot be used to find out who has an account, and We email the answer to the address on the account. Appeals are kept with the moderation records, for as long as those are kept (see “Retention of Your Personal Data” below), and are deleted if You delete Your Account. Pictures and videos that a moderator removed are kept until the days to appeal have passed or the appeal is decided.
Country Detection
To meet local legal requirements, We detect the approximate country a request comes from, using the visitor’s IP address through Our provider Cloudflare. We use it for one thing: the Marketplace age limit for knives. To contact a seller You must be old enough in the seller’s country, in Your own (from Your profile) and in the country Your connection seems to come from, and the highest limit applies. The country is worked out for each request and used on the spot; We do not store the IP address or the country against Your Account.
Technical Information
Like any website, Our servers and Cloudflare receive the technical details Your browser sends when You load a page, such as Your IP address, browser type and the page requested. We do not store Your IP address in raw form (see “Security Records” above).
Tracking Technologies and Cookies
We use Cookies to keep You signed in, remember Your choices and, only if You accept them, to analyse how Our Service is used. Our Cookie Policy lists each one. We use:
- Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. You can learn more about cookies here: All About Cookies by TermsFeed.
We use both Session and Persistent Cookies for the purposes set out below:
Necessary / Essential Cookies
Type: Session Cookies
Administered by: Us
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
Cookies Policy / Notice Acceptance Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
Functionality Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies remember choices You make when You use the Website, such as the light, dark or OLED black appearance and whether You hid the side panel, so You do not have to choose again on every visit.
For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
- To contact You: By email, for sign-in codes, security messages and notices about Your Account or Your content, including the outcome of reports.
- To keep the Service safe: To moderate content, handle reports, prevent abuse and respond to lawful requests.
- To manage Your requests: To attend and manage Your requests to Us.
- To improve the Service: To understand how it is used, if You accept analytics cookies, and to fix problems.
Why We Are Allowed to Use Your Data
- Contract: to run Your Account and give You the Service You signed up for.
- Legitimate interests: security, moderation, preventing abuse, and improving the Service.
- Consent: analytics cookies, signing in with Google, and the age check (You agree before it starts). You can withdraw consent at any time.
- Legal obligation: responding to lawful notices and requests.
Who We Share Data With
We do not sell Your data. We share it with these companies, who help Us run the Service:
- Cloudflare: DNS, the security proxy, the Turnstile bot check and email routing.
- Brevo: sends the emails We send You.
- Google: only if You choose to sign in with it.
- Agemin: only if You press Confirm Age and then Continue. It does the face scan that estimates Your age and tells Us whether You passed (see “Age Confirmation (Agemin)” below).
- Google Analytics: only if You accept analytics cookies, and only on the live website.
- Google, Apple or Mozilla (push services): only if You turn on notifications on a device. They deliver the notification, and receive Your device’s push address and the short message.
- Ko-fi: only if You choose to support Us through the link on the About page. That is a separate website with its own privacy policy and payment processing. We do not send it any of Your data and We never see Your card details.
- OpenFreeMap and OpenStreetMap: only on an event page that shows a map; the map is loaded from their servers, which receive Your IP address and the part of the map You look at.
- Nominatim (OpenStreetMap): when a business saves an event, the event’s address is sent from Our servers to look up where it is on the map. No member’s account details are sent.
- Public authorities: where the law requires it (see “Disclosure of Your Personal Data” below).
We may also share Your personal information:
- With Your consent, for any other purpose You agree to.
Retention of Your Personal Data
We keep Your Personal Data only for as long as is needed for the purposes in this Privacy Policy, and to comply with the law. In particular:
- Unfinished sign-ups are deleted after 7 days.
- Sign-in codes expire after 10 minutes.
- Failed sign-in records are kept only briefly.
- A device’s notification address is kept until You turn notifications off, it stops working, or You delete Your Account.
- Hangout messages are deleted after 30 days.
- Direct messages stay in a conversation until You or the other member delete them. A message that is deleted, and every message of a deleted account’s conversations, is kept in a restricted archive, readable only by administrators, which is used only to investigate abuse and to handle legal claims. The archive (deleted messages, messages of deleted accounts, and records of reports about messages and the moderators’ decisions) is kept for 12 months, or longer where needed for an open investigation or legal claim.
- Pictures and videos of content Our moderators remove are kept for 7 days, so the decision can be appealed, and then deleted; content removed permanently, and anything You delete Yourself (a post or thread, a picture taken out of one, a replaced profile picture, or Your Account), is deleted within about an hour. They are deleted from Our servers, and from Our content network shortly after. Copies in database backups are overwritten as the backups expire.
- Backups are kept for 30 days.
- Records of reports and moderation decisions (other than those about direct messages, described above) are kept for as long as needed to run the Service safely, deal with complaints and meet legal duties.
- Everything else is kept until You delete it or delete Your Account.
Getting a Copy of Your Data
You can download a copy of the personal data We hold about You at any time from Your account settings (“Download your data”). You confirm with Your password (or Your username, if You only sign in with Google) and receive one file in JSON, a common format that other services can read. It holds Your profile, posts, comments, likes, saves, Your Marketplace listings, the posts and events You have seen, reposts, follows, blocks, builds, reports You made, notifications, sign-in times, whether You show when You are online and the moderation log entries about You. It never contains Your password, sign-in codes or other members’ private details (only their usernames).
Deleting Your Account
You can delete Your Account yourself at any time from Your account settings. You confirm with Your password (or, if You only sign in with Google, by typing Your username) and tick a box to say You understand it cannot be undone.
Deleting is permanent and takes effect straight away. You are signed out everywhere, and We delete Your profile, Your Marketplace listings, Your posts and pictures (including the picture files on Our servers, which are removed shortly afterwards), Your comments, likes, saves, the record of posts and events You have seen, reposts, follows, builds, blocks, notifications, reports You made or that were made about You, Your links, Your sign-in details and Your email address. Counts shown on other members’ posts and profiles are adjusted. We cannot recover any of it.
What We keep after You delete Your Account:
- Moderation log entries (see “Moderation Log” above), which hold only a username and a short note.
- Backup copies of Our database. They are not edited; they are deleted when they reach the end of the backup retention period (currently 30 days) and Your data does not come back into the live site.
- Anything We must keep to comply with the law.
Transfer of Your Personal Data
Some of Our providers may process Your information outside the United Kingdom. Where they do, We use providers that apply safeguards, such as the UK’s approved contract terms, to keep Your data protected.
Disclosure of Your Personal Data
Law enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court, the police, Trading Standards or another government agency). Legal notices should be sent to [email protected] with the subject “Legal notice”.
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Your Rights
You can ask Us for a copy of Your data, to correct it, to delete it, or to stop using it in a particular way (to object). You can download Your data and delete Your Account in Your account settings, or write to [email protected]. If You are unhappy with how We handle Your data, You can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would like the chance to put things right first.
Automated Decisions
We do not make decisions about You by automated means. Moderation decisions are made by people.
Children’s Privacy
The Service is for people aged 13 or over. We do not knowingly collect data from children under 13. If You are a parent or guardian and think Your child has given Us Personal Data, please contact Us and We will delete it. Members under 18 cannot send a message to an adult unless the adult started the conversation or the member follows them, and the Marketplace checks the age limit for knives in the seller’s country, the member’s own and the country their connection seems to come from before a member can contact a seller. Anyone can look at an item for sale, with or without an account.
Age Confirmation (Agemin)
If You press Confirm Age on Your profile, You can show that You are 18 or over. The check is carried out by Agemin (agemin.com), an age checking company that acts for Us. It uses Your camera for a short face scan and estimates Your age from it. Your picture goes to Agemin and is not sent to Us, and We never see or keep it. Agemin tells Us only whether You passed, and We keep the date You were confirmed, which shows as a red 18+ badge on Your public profile. You can ask Us to remove the badge at any time. The check is Your choice, You are asked to agree before it starts, and You do not need it to use the Service.
While the check runs, Agemin may store a small cookie in Your browser (agemin_verification) and look at details of Your device, such as its screen and browser settings, to guard against fraud. This is only loaded when You press Continue on the check, and not on any other page. How Agemin uses and keeps Your data is explained in Agemin’s own privacy policy.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
- By email: [email protected]