Privacy Policy

Last updated: 14 July 2026

This policy explains what data is processed when you visit markirepsfinds.com (the “site”), why, and what rights you have under the EU General Data Protection Regulation (GDPR). The short version: this site has no accounts, no analytics, no advertising trackers and no marketing cookies. It is a catalog of links — the little data that is processed is what any web server technically needs to work and stay secure.

1. Who is responsible (data controller)

The site is operated by MarkiReps. For any privacy question or to exercise your rights, contact us through either channel below and we will respond within one month, as the GDPR requires:

Reddit: u/98marko2002
TikTok: @markireps98

2. What we process, and why

We do not ask for, collect, or store any personal information such as your name, email address or payment details. There is nothing to sign up for on this site. The only processing that happens is technical:

Connection data (IP address, request URL, browser user-agent). Sent automatically by your browser with every request to any website. Our hosting and security providers (Section 4) process it to deliver the pages and to protect the site against attacks and abuse. We do not use it to identify or profile visitors.
Rate limiting. The server keeps short-lived, in-memory counters per IP address to block abusive request floods. These counters live only in memory and disappear within minutes or when the server restarts.

Legal basis: our legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR). This processing is strictly necessary to show you the site at all.

3. Data stored on your device

The site uses your browser's local storage for a few small, functional preferences. These are not tracking cookies — they never leave your device, are not read by third parties, and are not used to identify you. Because they are strictly functional, EU law does not require a consent banner for them.

Key	Purpose	Lifetime
`reps_currency`	Remembers your chosen display currency	Until you clear your browser data
`reps_welcomed`	Remembers that you dismissed the welcome message so it isn't shown again	Until you clear your browser data
`reps_v4_items`	Fallback copy of the catalog so the site still works if the server is unreachable	Until you clear your browser data
`room_cat`	Carries the category you clicked in the 3D showroom over to the store page	Deleted immediately after use

You can delete all of these at any time via your browser settings (“Clear browsing data / site data”). The site keeps working without them.

Our security provider Cloudflare may set its own strictly-technical cookie (such as __cf_bm) to distinguish humans from bots. It contains no profile of you and expires within about 30 minutes. Details: Cloudflare cookie documentation.

4. Service providers we use (data processors)

To run the site we rely on a small number of infrastructure providers, which technically process your connection data on our behalf:

Provider	Role	Privacy policy
Cloudflare, Inc.	Content delivery network, DDoS protection and security in front of the site	cloudflare.com/privacypolicy
Railway Corp.	Server hosting	railway.com/legal/privacy
jsDelivr	Delivers one JavaScript library (three.js) used by the 3D showroom page; your browser requests it directly from their servers	jsdelivr.com privacy policy
ExchangeRate-API	Your browser fetches current exchange rates from this service to show prices in your currency; the request carries no data about you beyond the standard connection data	exchangerate-api.com/terms

Some of these providers are based in, or route traffic through, the United States. Where personal data (such as IP addresses) is transferred outside the EU/EEA, these providers rely on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses as the legal transfer mechanism.

5. External links

The site exists to share links to external platforms — Fansbuy (our affiliate partner), Taobao, Weidian, 1688, Reddit and TikTok. Once you click through to any of those, their privacy policies apply, not ours. We do not receive any personal data back from them about what you do there. No purchases take place on this site.

6. What we don't do

No analytics or statistics tools (no Google Analytics or similar)
No advertising, advertising networks, or tracking pixels
No profiling and no automated decision-making (Art. 22 GDPR)
No selling, renting, or sharing of data with third parties for their own purposes
No newsletters, no accounts, no forms that collect personal data

7. Data retention

We keep no databases of visitor data. Connection data lives in the short-term operational logs of our hosting and security providers and is deleted according to their standard retention schedules (typically days to a few weeks). Rate-limiting counters exist in server memory for minutes. Preferences in your browser's local storage stay on your device until you delete them.

8. Your rights under the GDPR

If you are in the EU/EEA, you have the right to:

Access the personal data we hold about you (Art. 15)
Rectification of inaccurate data (Art. 16)
Erasure — the “right to be forgotten” (Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing based on legitimate interests (Art. 21)

In practice: because we don't store personal data about visitors, there will usually be nothing to hand over or delete — but you are always welcome to ask, and we will answer within one month, free of charge.

You also have the right to lodge a complaint with your national data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.

9. Children

The site is not directed at children under 16 and we knowingly process no data about them.

10. Changes to this policy

If the site ever starts processing more data than described here (for example by adding analytics), this policy will be updated first and the “last updated” date at the top will change. Significant changes will be flagged on the site itself.