Demo version · 30 July 2026

Privacy policy

Important: NOVA Market is a portfolio project. This document demonstrates expected UX content and is not legal advice or the policy of an operating business.

1. Controller and project scope

The application runs locally and does not conduct real sales. When Stripe sandbox credentials are configured, test order details are sent to Stripe solely to demonstrate the payment flow.

2. Data stored locally

The portfolio PostgreSQL database may store a nickname, email address, password hash, demo delivery address, and order history. Do not enter real personal data.

3. Purpose and legal basis

Data is used only to demonstrate registration, sign-in, cart, order, and Stripe test-payment features. In a real deployment, the legal basis, processors, and retention periods require professional approval.

4. Cookies

The application uses an essential session cookie for sign-in, the cart, and CSRF protection. It does not use advertising or analytics trackers.

5. Your rights in this demo

Demo data must be removed through controlled PostgreSQL administration procedures. A live store must provide procedures for access, rectification, deletion, and data portability.

6. Security

Passwords are hashed, SQL queries are parameterized, forms use CSRF tokens, and responses include baseline security headers. The hosting platform or reverse proxy must provide HTTPS.