1. Nature of the Platform (Important Notice)

anabadaus.com operates solely as a listing and messaging platform.

The Site is provided as an online platform that allows users to post listings, publish community posts, and communicate with one another. Updated

We do not:

• Buy, sell, ship, deliver, or inspect items
• Process payments or collect financial information
• Participate in or control user-to-user transactions

All transactions occur outside the Site and at users’ own risk.

Our business model is based on advertising and platform services, not transaction fees.

2. Information We Collect

We intentionally minimize the personal information we collect.

A. Information You Provide

Google Login Information (OAuth)

Google OAuth is used solely for authentication and account creation purposes.

When you sign in using Google, we may receive and store:

• Google email address (used for account identification and login)
• Google profile name (used only to assist with initial account setup)
• Google profile image URL (used only for optional profile display)

We do not collect or access:

• Google contacts
• Google Drive data
• Google Calendar data
• Any other Google account information beyond basic authentication profile data

Google profile information is used only for authentication and account-related functionality and is not shared with third-party advertising partners.

Public identification on the Site is based solely on user-created nicknames, not Google profile names.

User-Created Nickname

Your nickname is used as your public identifier on the Site.

Preferred Location ZIP Code

Your ZIP code is used only to:

• Display listings by approximate geographic area
• Support local content relevance
• Display Company-operated local advertisements

ZIP codes are processed internally and are never disclosed, sold, or shared with third-party advertising partners, including Google AdSense.

Account & Data Deletion

You may request deletion of your account and associated data at any time by:

• Emailing webcodegenstudio@gmail.com, or
• Using available account deletion features on the Site.

Deletion requests are typically processed within thirty (30) days, subject to legal and operational requirements.

Information We Do NOT Collect

We do not require or request:

• Real names
• Phone numbers
• Physical addresses
• Payment, credit card, or banking information

B. Information Collected Automatically

When you access the Site, we may automatically collect:

• IP address
• Device type and browser information
• Pages viewed, clicks, and interactions
• Approximate location inferred from IP address (not precise geolocation)

3. CCPA / CPRA Categories of Personal Information

Key Notes

• We collect only the minimum personal information necessary.
• We do not collect precise geolocation or sensitive personal information.
• User-provided ZIP codes are used internally to support platform functionality such as sorting listings and displaying Company-operated local advertisements.
• ZIP codes are not shared with third-party advertising partners, including Google AdSense.

4. Messaging & User Content

Messages are user-generated content provided solely as a communication tool between users.

We do not actively monitor messages in real time. Messages are stored only as necessary to operate the Site and maintain core functionality.

Messages are retained for up to one hundred eighty (180) days from the date of transmission unless:

• Earlier deletion occurs,
• Longer retention is required for legal obligations, abuse investigations, or enforcement of our Terms or policies, or
• Retention is reasonably necessary for security or fraud prevention purposes.

Users are solely responsible for their communications. We do not guarantee the confidentiality, delivery, or security of user-to-user messages.

5. Use of Information

We use personal information to:

• Operate, maintain, and improve the Site
• Authenticate users
• Display listings and user profiles (nickname only)
• Provide analytics and diagnostics
• Operate advertising and monetization systems
• Detect, prevent, and address fraud or abuse

User-provided location information (such as ZIP codes) may be used to display geographically relevant listings or content.

Google email addresses are used solely for authentication and account identification.

We do not engage in automated decision-making producing legal or similarly significant effects.

6. Advertising, Cookies & Analytics

A. Essential Cookies

Used for authentication, security, and core Site functionality. These cookies cannot be disabled.

B. Analytics Cookies

Used to understand Site usage and performance. Data is analyzed in aggregated or de-identified form.

C. Advertising Cookies & Cross-Context Behavioral Advertising

The Site may display third-party advertisements, primarily through Google AdSense.

Advertising partners may use cookies or device identifiers to:

• Measure ad performance
• Prevent fraud and abuse
• Serve personalized or contextual advertisements

Location-Based Advertising

The Company may display Company-operated local advertisements using approximate location information such as user-provided ZIP codes or general surrounding areas for relevance purposes.

User-provided ZIP codes are processed solely within the Company’s platform and are never disclosed, sold, or shared with third-party advertising partners, including Google AdSense, for advertising, tracking, or cross-context behavioral advertising purposes.

This does not involve precise geolocation tracking.

Under the CPRA, certain advertising-related disclosures involving third-party advertising services may be considered “sharing” of personal information. Company-operated local advertisements based on internally processed ZIP code information do not constitute a sale or sharing of personal information.

Google AdSense Data Practices

When ads are displayed, Google may collect device information, IP address, ad interaction data, and approximate location (city/state level). Such information is collected directly by Google and not provided by the Company.

• Google’s Privacy Policy: https://policies.google.com/privacy
• Google Ad Settings: https://adssettings.google.com

If additional advertising partners are added, this policy will be updated accordingly.

D. Your Privacy Choices (Opt-Out of Sharing)

We do not sell personal information.

California residents may opt out of sharing by:

• Clicking “Do Not Sell or Share My Personal Information” in the Site footer, or
• Enabling Global Privacy Control (GPC).

When opt-out or GPC signals are detected:

• Sharing for cross-context behavioral advertising is limited
• Ads are generally served in a non-personalized manner

The Site may display a confirmation message or visual indicator confirming that the opt-out preference has been applied.

E. Cookie Persistence & Technical Limitations

Opt-out preferences (other than GPC) rely on browser cookies. Clearing cookies or changing devices may require reapplying preferences.

GPC is recognized automatically.

F. No Impact on Core Functionality

Exercising privacy rights does not restrict core Site functionality.

7. Do Not Sell or Share My Personal Information

For additional information, see the dedicated page linked in the Site footer.

8. Data Retention & Security

A. Retention Periods

We retain personal information only as long as necessary for legitimate business purposes and legal compliance.

Account & Authentication Data

• Google email address: Account duration + 90 days after deletion — Authentication and account recovery
• User nickname: May remain visible on past content even after account deletion — Content integrity and user identification continuity
• ZIP code: Account duration + 30 days after deletion — Geographic features and local content matching

User-Generated Content

• Active listings: 6 months from posting date (auto-expiration policy)
• Deleted listings: 30 days in archived state — Recovery period in case of accidental deletion

Messages (Sent/Received)

• Up to 180 days from message date — Platform functionality, safety monitoring, and dispute resolution

System & Security Data

• IP addresses and access logs: 90 days
• Analytics data: 24 months (aggregated/de-identified)

Compliance & Legal Data

• DMCA takedown notices and counter-notifications: 3 years
• Abuse reports and investigations: 3 years

B. Exceptions to Deletion

Information may be retained longer when necessary for legal obligations, compliance with court orders or subpoenas, law enforcement requests, tax or regulatory requirements, ongoing investigations, fraud prevention, or enforcement of Terms or policies.

Even when retained, access is restricted to authorized personnel only.

C. Anonymization & Aggregation

Some deleted data may be retained in anonymized or aggregated form indefinitely for statistical analysis, product research, trend analysis, and service improvement. Anonymized data cannot be linked back to individual users and is not considered personal information under CCPA/CPRA.

D. Security Measures

We implement reasonable administrative, technical, and physical safeguards, including:

• TLS 1.2+ encryption (HTTPS)
• Secure authentication via Google OAuth 2.0
• Password hashing and encryption (where applicable)
• Regular security updates and patches
• Firewall and intrusion detection systems
• Access controls and role-based permissions
• Security audits and incident response procedures
• Secure server hosting with backup and disaster recovery
• Access logs, audit trails, and automated threat detection

E. Security Limitations

Users should protect their Google account credentials, use strong passwords, exercise caution when sharing information, and report suspicious activity promptly.

F. Data Breach Notification

In the event of a data breach affecting personal information, we will investigate promptly, contain and remediate the issue, notify affected users as required by law, and notify regulatory authorities where required.

Notifications will be provided without unreasonable delay, typically within 72 hours where required by law, via email to the registered address.

9. California Privacy Rights

California residents may request to:

• Access personal information
• Request deletion or correction
• Opt out of sharing

Requests may be submitted to: webcodegenstudio@gmail.com

We respond within forty-five (45) days where required by law.

10. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for their privacy practices.

11. Children’s Privacy (COPPA Compliance)

The Site is not intended for children under the age of 13. In addition, users must be at least eighteen (18) years old to create an account or use the Site.

We do not knowingly collect personal information from children under 13. If a parent or guardian believes a child has provided personal information, please contact us and we will delete such information within a reasonable time.

12. Safety & Disclaimer of Responsibility

We do not verify:

• User identities beyond authentication
• Listing accuracy
• Item authenticity or ownership

We are not responsible for failed transactions, fraud or scams, disputes between users, or physical harm arising from in-person meetings.

Users should exercise caution and follow common safety practices.

13. Changes to This Policy

We may update this Privacy Policy at any time. Continued use of the Site constitutes acceptance of the revised policy.

14. State-Specific Privacy Rights (U.S.)

Residents of certain U.S. states may have additional privacy rights under applicable laws, including California, Virginia, Colorado, Connecticut, and Utah.

Requests may be submitted to: webcodegenstudio@gmail.com

15. Do Not Track (DNT) & Global Privacy Control (GPC)

The Site does not currently respond to browser Do Not Track (DNT) signals.

We do recognize and honor Global Privacy Control (GPC) signals as a valid opt-out request where required by law.

16. Geographic Restrictions

The Site is intended solely for users located in the United States.

We do not knowingly collect information from non-U.S. residents and do not support international transactions.

17. Language Priority

If this Privacy Policy is provided in multiple languages, the English version shall prevail in the event of any inconsistency.

18. Contact Information