Privacy
Privacy policy
At Monti we care that you feel safe when using our service. This privacy policy explains, in plain language, what information we collect about you, why we do it, and what rights you have. We try to collect as little as possible — and be honest about the rest.
Who is the data controller?
The data controller for the personal data described here is the operator of Monti. One thing is worth knowing up front: the same operator also runs the Norwegian marketplace Finnting. It is one operator running two brands, and the account store is shared — an account created on either site works on both, and your account data lives in that shared store.
- Privacy email: support@pjazzo.com
What information do we collect?
We only collect what we need for Monti to work and be safe to use.
Account information
When you create an account, we store:- Email address — for login, notifications and contact.
- Display name — the name other users see on your listings and in your conversations.
Listing data
When you post a listing, we store what you yourself choose to share: title, description, price, category, location, photos and any details (for example car make or home floor area). Remember that listings are public — never share more than you are comfortable with.Passkey / WebAuthn
If you log in with a passkey, we store only the public key and technical information linked to it (for example a key ID and a counter).We do not store biometrics. Fingerprints or facial recognition are never sent to us — they stay on your device. We only see that your device has confirmed it is you.
Cookies
We use cookies to keep you logged in and to make the service work. See the full overview further down.Logs and IP address
To keep Monti safe we log technical data such as IP address, timestamps and certain requests. We use this for security, troubleshooting and rate limiting (to stop abuse and automated attacks).Why do we process the data — and on what basis?
| Purpose | What we use | Legal basis |
|---|---|---|
| Creating and operating your account | Email, display name, passkey | Contract (the terms you accept) |
| Displaying and facilitating your listings | Listing data | Contract |
| Keeping the service safe and preventing abuse | Logs, IP, rate limiting | Legitimate interest |
| Improving and troubleshooting the service | Technical data | Legitimate interest |
| Sending you news or marketing (if applicable) | Consent — you can withdraw it at any time |
How long do we keep the data?
We keep the data for as long as you have an account with us.
- Account information and passkeys: deleted when you delete your account.
- Listings: can be removed by you at any time; expired listings are cleaned up after a period.
- Security logs: kept for a limited period (typically a few months) before being deleted automatically.
Do we share the data with others?
We never sell your data. Full stop.
As described above, your account lives in a store shared with our sister marketplace Finnting. That is not sharing with a third party — it is the same operator — but it does mean the same account works on both services.
To operate the service we use certain subprocessors — for example providers of servers, storage and email delivery. These process data on our behalf, under data processing agreements, and may not use it for their own purposes.
We may disclose data if the law requires it, or to protect users against abuse and fraud.
Where is the data stored?
Our servers are located within the EU/EEA. We aim to keep all processing inside the EU/EEA; if we ever use a provider that transfers personal data outside the EU/EEA, we will only do so with a valid transfer mechanism under GDPR chapter V (an adequacy decision or standard contractual clauses), and we will say so here.
Note: Monti is a meeting place and facilitator. We handle no payments — buyer and seller deal directly. Information you yourself share in dialogue with a counterparty is under your own control.
Your rights
You have strong rights under the EU General Data Protection Regulation (GDPR), and we are happy to help you exercise them:
- Access — find out what data we hold about you.
- Rectification — have incorrect or incomplete data corrected.
- Erasure — have your data deleted ("the right to be forgotten").
- Data portability — receive your data in a common, machine-readable format.
- Restriction and objection — ask us to restrict or stop certain processing.
- Withdrawing consent — where we process based on consent, you can withdraw it at any time.
Overview of cookies
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| Session cookie | Keeps you logged in | Necessary | Deleted when you log out / the session expires |
| Security / CSRF | Protects against forged requests | Necessary | Session |
| Preferences | Remembers choices such as display, language and consent | Functional | Up to 12 months |
Changes to this policy
We may update this privacy policy from time to time, for example when the service gains new features. In the event of material changes we will notify you in a clear way. The date of the latest update will appear at the bottom of the page.
Contact us
Wondering about anything privacy-related? We're happy to answer.
- Email: support@pjazzo.com