Privacy policy

Last updated: 27 October 2026.

This Policy explains how personal data is processed on audioabsolute.md (AudioAbsolute), a classifieds platform for audio equipment with different purposes and segments. For data questions and rights requests, contact info@audioabsolute.md.

The laws of the Republic of Moldova apply, including Law No. 195/2024 on personal data protection. Reading this Policy, registering or accepting the Terms of Use does not constitute blanket consent to all processing. Where consent is required, it is requested separately.

1. Data we process

• Account: username, email, a protected representation of your password, registration and email-verification dates, account status, login and active-session information, verification and recovery tokens. A phone number is not required for registration.
• Profile and listings: the name, phone number, avatar, description and region you provide, equipment details and photographs, price, selected contact methods, publication and moderation history.
• Communication: messages, photographs and other supported attachments, participants and conversation times, delivery and read indicators, reactions, blocks and communication settings.
• Site activity: favourites, settings, notifications, presence information, views and interface interactions.
• Contact and reports: name, email, selected subject and message sent through the contact form, account details when signed in, IP address and browser information; site ratings, reports, their content, status, review history and related material.
• Technical information: IP address, browser and device information, visited pages, request times, session identifiers, cookies and security records. The application's visit log does not include URL query strings; this does not automatically apply to separate web-server and infrastructure logs.
• Catalogue preferences: the equipment purposes and segments you select, save through your own action and associate with your account. Purpose and segment stated in a listing are part of its public information.

Saved preferences provide the initial selection of listings in the catalogue, search and selections that use these settings. This applies your choices; it does not certify product quality. Your preference list is not published on your profile. You can change it in account settings or through the separate save action in filters. Settings remain in the site database until changed or until final account deletion under section 9. Selecting all options removes restrictions but does not delete your account. If you share a link containing search parameters, its recipient can see the selected filtering conditions.

Data comes from you, automatically through the operation of the site, and from other participants and people submitting reports. Do not send passwords, banking codes, identity-document copies or other unnecessary sensitive information through listings or messages. The site does not handle payments for users' goods or ask for card details for such payments.

Community and audio profiles: we process topics, replies, quote relationships, photographs, reactions and their authors, subscriptions, read markers, recent Community visits, earlier post versions, reports and moderator actions. Additional profile fields, system descriptions, components and photographs are provided voluntarily together with their selected visibility. Personal emoji usage history is associated with the account to show up to 24 recent reactions; it is not a public list.

1.1. Signing in with Google

A verified email address, including one verified by Google, is used to award the one-time welcome bonus of 1000 notes. The balance and transaction history are stored to account for the bonus, and a service email notifies you of the credit.

Signing in with Google is an additional registration and sign-in method that you choose. Standard registration and password sign-in remain available. When you select a provider, your browser opens its authorisation page; you enter your Google password with that provider, and it is not sent to AudioAbsolute.

Data received: your account identifier at the selected provider, email address, name and profile photograph, where the provider supplies them within the access you grant. For Google, the email-verification indicator is also checked. The identifier links your provider account to your site account and is used for subsequent sign-ins. The integration requests only basic profile data and email; it does not request access to Gmail messages, Google Drive, contacts.

Creating and linking accounts: email is used as the account address and to find an existing registration. An email match alone does not link accounts: the password of the existing AudioAbsolute account is required. Profile data and information about an unfinished sign-in are processed temporarily in the server-side session; the sign-in completion step is valid for 10 minutes.

Username and avatar: when a new account is created, the provider's name may be converted into a valid, unique username; if unsuitable, a technical username is generated. Where available and accepted by the checks, the photograph is downloaded and stored on the site's server as an avatar. The username and avatar may be displayed publicly, so the username may reveal your real name. You can change them or remove the photograph in account settings. Linking or signing in again does not automatically replace an existing user's username or avatar; later changes to the provider's photograph are not automatically synchronised.

Exchange with the provider: Google receives information about the request to sign in to AudioAbsolute and technical connection data for its service, including IP address and browser information. The site's server exchanges the authorisation code for an access token and requests the profile; when importing a photograph, it contacts the provider's image server. Provider access tokens are not stored in the site's database or user session. A separate AudioAbsolute session is created for subsequent use of the site. This sign-in is initiated by your action and does not constitute consent to analytics or advertising.

Processing to create or link your account and provide your chosen sign-in method forms part of providing the service at your request; security checks serve the purposes in section 2. The provider's own processing is described in Google's Privacy Policy.

2. Purposes and legal grounds

• Providing the service: registration, login, profile and listing management, saving and applying your chosen catalogue preferences, messaging, favourites and necessary notifications are processed to perform the site-use agreement and take steps at your request before entering into it.
• Security and moderation: preventing spam and fraud, limiting abuse, reviewing reports, protecting rights and maintaining technical stability are based on the legitimate interests of the operator and users, taking your rights and the proportionality of processing into account.
• Contact and service quality: answering questions and processing feedback involves steps at your request in connection with the service or a legitimate interest in handling requests and correcting errors, depending on the request. The site's own visit tracking and external analytics require separate consent to the Analytics category. Necessary technical monitoring and abuse prevention operate separately.
• Optional technologies and mailing lists: consent, where required by law. Consent can be withdrawn; accepting the Terms does not mean agreeing to advertising.
• Legal requirements: compliance with specific legal obligations and lawful requests from authorised bodies.

Without mandatory registration data, an account cannot be created; without information needed for a particular feature, that feature cannot be provided. Optional fields may be left blank. Declining optional cookies does not prevent use of the site's main functions.

Processing publications, subscriptions, read markers, visibility choices and recent emoji is necessary to provide the requested communication and profile features. Spam prevention, report review and moderation history serve legitimate interests in security, protecting rights and maintaining order, taking participants' rights into account. Consent to optional analytics is not a condition of forum participation. Reply notifications are available in the site's notification centre; subscribing to a topic is not a subscription to advertising.

3. What other users can see

A public profile may show your username, avatar, description, region, registration date, email-verification indicator and active listings. The verification indicator does not reveal the email address. Listing text, photographs, prices and other published details are visible to visitors. A phone number is displayed when that contact method is selected in a listing.

Contact details or other data you place in a description, nickname or photograph also become public. Public pages may be indexed by search engines and copied by visitors. Removing material from the site cannot automatically recall copies already saved by others.

Conversations are intended for their participants. The other participant sees the material you send and the activity, delivery and read information provided by the interface. Availability and notification settings apply within the site's supported functions.

Visible forum topics, posts, photographs, reactions and author information are also accessible to visitors who are not signed in. Others may copy them and external systems may index them; hiding material on the site does not automatically remove third-party copies. Additional audio-profile fields and systems have separate visibility settings: owner only, members or everyone; new fields and systems are private by default. Components and photographs inherit the system's visibility. File-access checks do not make a public post's photograph private. Authorised administrators process information needed for support, report review and compliance with law.

4. Messages, reports and administrative access

The site stores and processes messages and attachments so that participants can exchange them. Messaging should not be considered an end-to-end encrypted system that prevents operator access. Authorised administrators may access relevant messages and technical data when reviewing reports, investigating abuse, resolving faults or complying with the law. Access is limited by the relevant permissions; moderation actions are recorded.

Reports may contain information about the reporter, a user, listing or message, and may be retained with the review outcome. They are not published as reviews. Use reports for actual violations and provide only necessary information.

5. Notifications and email

Contact-form messages are stored in the contact-management system; their content and contact details may also be sent to the service mailbox for review. This does not publish the message or subscribe you to advertising. A guest request is not always linked to an account: when asking about it, provide the email used and approximate submission date. Deleting a database record does not automatically delete its email copy.

Account operation requires verification, access-recovery and other necessary service emails. The site also supports internal and configurable notifications, including unread-message and listing-status notifications. Available email settings can be changed in your account. An unread-conversation email contains a general notification and a link to messages, without conversation text or attachments.

6. Cookies, local storage and external services

Cookies and browser storage are used for sessions, form protection, consent choices and interface functions. Consent choices are saved for up to 180 days unless changed or deleted sooner. Optional categories can be managed through cookie settings. See the Cookie Policy.

Google Tag Manager loads only after the Analytics category is allowed. Its container does not load before valid consent. Loading it sends Google connection information, including your IP address and browser details. The site sends separate analytics and marketing consent signals; advertising tags must additionally respect the Marketing category. A container does not itself mean Google Analytics or advertising is active: the tags and their behaviour depend on the published container settings. Withdrawing analytics permission reloads the page without the container.

The site creates events for listing and catalogue views, searches, filtering and interface actions to support analytics configuration. They may include search terms, filters, listing details and interactions; conversation content and completed contact-form fields are not included. Do not enter sensitive information in search. Transmission to external analytics services depends on the connected tags and applicable consent settings.

Embedded YouTube material, where present, uses permission for external content. Once allowed, the player contacts YouTube and may transmit technical data. Privacy-enhanced mode does not mean no data is transmitted. See Google's Privacy Policy.

The site's own visit tracking with the site_visitor cookie also operates only with valid Analytics consent. It may associate pages and visit times with a random identifier, IP address, browser details, referring domain and account ID when signed in. This is not anonymous statistics. When declined, this mechanism does not record new visits and its cookie is removed on the next page load. Necessary request processing and security records continue independently. Withdrawing consent does not automatically delete existing records, your account or messages; deletion may be requested separately.

7. Recipients and international transfers

Recipients include message participants, visitors within the scope of public information, authorised administrators and providers of necessary hosting, infrastructure and email-delivery services. Connected Google services receive data when contacted. Data is provided to public authorities and other authorised persons where there is a lawful basis. We do not sell or rent the user personal-data database.

Foreign infrastructure and services provided by Google may process data outside the Republic of Moldova. Such transfers require the legal grounds and safeguards prescribed by law; publishing this Policy does not replace them. Information about applicable recipients, processing countries, safeguards and how to obtain a copy of the relevant safeguards can be requested by email. A third-party privacy policy does not release the site operator from its own obligations.

The AudioAbsolute Viber group is a separate communication channel. Following the link and joining are voluntary; site accounts, topics and messages are not automatically transferred to Viber. When following the link, joining or using the app, Viber's processing is also governed by its own terms and privacy policy. Do not post information in the group that you do not want to share with its participants.

Publishing listings on Facebook (Meta)

AudioAbsolute sends public listing data to promote the listing on the official AudioAbsolute Facebook Page: title, price, currency or pricing terms, city and link. Facebook may retrieve photos and other public page information to generate the link preview. Phone numbers and email addresses from non-public account fields are not added to the post template, but contact details and other personal data placed by the author in public text or images may appear in the post or preview. Passwords, private conversations and non-public profile fields are not sent for this publication. Recipients are Meta and the Page's audience; visitors may save and redistribute materials.

The purpose is to promote the relevant listing and keep its external post up to date. The basis may be the operator's and author's legitimate interest in that promotion, only where processing is necessary and proportionate and the individual's rights and interests do not override it; the operator must assess and justify this before processing. Where applicable law requires consent, it is needed before disclosure. Permission to use text and photographs does not replace a lawful basis for processing personal data. Updating this Policy does not mean that such consent has already been obtained, including for older listings. You may object or withdraw previously given consent where processing relies on it.

Meta also processes received data under its own rules: Meta Privacy Policy. Its processing may occur outside the Republic of Moldova; the requirements for a lawful basis and international transfer safeguards in this section apply. AudioAbsolute's operator remains responsible for its own disclosure and processing; referring to Meta's rules does not remove those duties. Publication is performed by the server and does not itself activate Meta Pixel or Facebook cookies in a visitor's browser. Consent to analytics or marketing cookies is not permission to republish a listing.

The integration stores listing, Page and post IDs, publication, update and deletion status and times, attempt counts, error codes and an administrator identifier or an automated-operation marker. Update logs contain the submitted text; republication preserves the earlier publication and deletion records. These records support duplicate prevention, error correction, handling requests and documenting actions. They are not automatically anonymous and may remain after a listing or account is deleted. There is currently no fixed automatic purge period; continued retention must be reviewed and unnecessary data deleted or anonymized, subject to legal duties and disputes. Lack of automatic purging does not permit indefinite purposeless retention; you may separately request deletion of personal data contained in these logs.

Text updates and post deletion are asynchronous. Unapproved changes are not sent; photos and previews may remain unchanged after a text update. A listing marked sold, expiry or temporary account deactivation does not ensure immediate deletion of the Facebook post. To request correction or deletion, or to object, email info@audioabsolute.md with the listing ID and post link. The data deletion procedure explains the process and limits; the rights and response periods in section 10 continue to apply.

8. Retention periods

• Accounts and listings: for the duration of service use and until deletion under the procedure below. Deactivation is not deletion.
• Visit logs: detailed records are scheduled for cleanup after 90 days; aggregate daily totals may be retained longer without individual-visit details.
• Login attempts: records older than 90 days are eligible for cleanup once any related temporary block has ended.
• Reports outside the forum: during review and for 365 days after closure; message-moderation and user-event history for 365 days. Cleanup runs periodically, not at the exact second a period expires. Open reports are not automatically deleted before review is complete.
• Conversations: while available to an active participant and necessary to provide their communication history. One participant's account deletion does not remove the conversation for the other. Once both participants are deleted, conversations and attachments become eligible for cleanup after the retention period for related reports ends.
• Contact requests, feedback and service records: as needed to handle requests, maintain security and protect rights. A minimal final-deletion record contains a technical ID, time and operation source; it is not an archive of the deleted profile.

Where a specific legal obligation or the need to preserve evidence in a dispute applies, relevant information may be retained on that basis to the necessary extent. External-backup periods depend on the infrastructure; deletion from the working database does not immediately remove all backup copies. Ask the operator for clarification about particular data.

Community data: publications and photographs are retained while needed for the availability and integrity of discussions, subject to deletion requests and lawful grounds. Hiding content is not the same as deleting it. No automatic cleanup period is currently configured for forum revisions, reports, moderation logs or server-side emoji history; the 365-day period above does not cover this Community data. Continued retention depends on its purpose, the state of a report or dispute and legal requirements. The absence of automatic cleanup does not remove the right to request deletion or restriction. Subscriptions can be cancelled; recent emoji history is deleted when the account is permanently erased.

Google sign-in data: the provider link (its identifier), email, generated username and locally saved avatar are retained as account data until changed, until the relevant data is removed or until the account is permanently deleted. The periods and exceptions in this section apply, including the backup provisions. Permanent account deletion clears the Google identifiers and removes the local avatar through the general file-cleanup procedure.

9. Deleting accounts and data

A deletion request made through account settings provides a 30-day recovery period. During this period the account awaits deletion and listings are hidden. Final cleanup follows after the period expires. Final deletion by an administrator does not provide a recovery period.

Final cleanup removes profile and contact data, the avatar, listings and their photographs, sessions and tokens, settings, favourites, user reactions, presence, notifications, and account-linked contact-form requests and site ratings. A technical identifier marked as deleted remains in place of former identifying and contact details. Files are cleaned up after records are deleted; failed file operations are retried.

Messages and private attachments may remain available to other participants, with the author shown as “Deleted user”. This does not anonymise information within text or photographs. To remove particular personal data from retained conversations, send a separate request. It will be considered in light of participants' rights, any dispute and legal requirements. The account recovery period does not remove the right to request deletion without undue delay in cases provided by law.

Forum publications are retained separately from the account. Permanent deletion removes the account association from topics and posts and deletes its reactions and subscriptions. Earlier versions of the user's own posts are deleted; the reporter's identifier and comment are removed from their reports. Forum text, quotes and photographs are not automatically deleted or scrubbed of personal information within them. The extended audio profile and systems are deleted, and system photographs are queued for cleanup. For a particular text or photograph, send a separate request with its link to the contact email.

Revoking Google access: you can revoke AudioAbsolute access in your account settings with the relevant provider. This action alone does not delete your site account, previously saved data or an active AudioAbsolute session. To request deletion, follow the procedure in this section or contact info@audioabsolute.md. To sign in with a password afterwards, use password recovery through your verified email if needed. Deleting your AudioAbsolute account does not delete your Google account.

10. Your rights and requests

Where provided by law, you may obtain information and access, correct data, request erasure or restriction, object to processing based on legitimate interests and exercise data portability when its conditions are met. Consent can be withdrawn without affecting the lawfulness of earlier processing. To object to direct marketing, notify the operator.

Send requests to info@audioabsolute.md, describing the issue and identifying your account, if any. Proportionate identity verification may be needed; do not send document copies in advance. We respond without undue delay and no later than one month after receiving a request. Where necessary because of complexity or the number of requests, this may be extended by a further two months, with reasons communicated within the first month. A refusal is accompanied by reasons and information on appeal options within one month of receipt. Requests and information are handled free of charge; exceptions for manifestly unfounded or excessive requests apply only as permitted by law and with reasons explained.

You may contact the National Centre for Personal Data Protection of the Republic of Moldova (CNPDCP) and the courts. Contacting the operator does not limit those rights.

11. Data protection and automatic restrictions

The site uses authentication, access controls, form protection, session controls and rate limits. Automatic technical restrictions may temporarily prevent actions when activity appears suspicious. Contact the operator for review if you believe a restriction is mistaken. Report moderation involves administrators. Where provided by law, you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; where applicable, you may request human intervention, express your position and challenge the decision. Absolute security of transmission and storage cannot be guaranteed.

The site is not directed at children. If you discover a child's data being processed without the necessary legal basis, contact the operator for review and appropriate action.

12. Changes to this Policy

The current version is published with its update date. Material changes to purposes, data categories or external services require appropriate information and, where necessary, renewed consent. Continuing to use the site does not replace that consent. Publication and communication rules are set out in the Terms of Use.