Legal
Privacy Policy
In effect from .
MoneyWave is a free, publicly scored directory of China–Africa sourcing agents, operated by The Walker Ledger LLC. To browse it we ask for nothing. A free account needs only an email address — there is no password to lose. We never see or store a card number. We publish information about listed businesses that we gathered from their own public posts, and anyone listed can have that corrected or removed by emailing us.
What we collect from you
Only what a feature actually needs, and nothing to browse. The list below is exhaustive for the directory.
| What | When | Why |
|---|---|---|
| Email address | When you create a free account | It is your identity here — there is no username or password |
| A one-time sign-in code | Each time you sign in | Stored only as an irreversible hash and deleted after 10 minutes |
| A session record | While you are signed in | So you stay signed in; expires automatically |
| Your ratings and written reviews | When you rate or review a seller | To show the community total and your own review back to you |
| Your saved sellers | When you star a listing | Visible only to you |
| A billing customer reference | If you subscribe | Held by Stripe; we store only their reference to it |
| Your IP address | When you request a sign-in code | To stop one address requesting thousands of codes. Not retained as a profile |
| Recipient and transfer details | Only if you use the payment widget | Passed to the payment provider to make the payment |
We do not ask for your name, your address, your date of birth or your phone number to use the directory. If a feature ever needs one of those, it will ask at the moment it needs it and say why.
What we never hold
Three things worth stating explicitly, because people reasonably assume otherwise.
- No card numbers. Subscription payments go through Stripe's own hosted checkout. Card details are entered on Stripe's page and never reach our servers.
- No passwords. There are none to steal. Signing in sends a code to your email, and even that code is stored only as a hash that cannot be reversed back into the code we sent you.
- No reading of your private messages. Everything in the directory comes from posts and comments that were already public. We have no access to anyone's DMs, WhatsApp groups or private orders, and nothing in the trust signal is derived from them.
People and businesses we list
This is the part of the directory that involves information about people who did not sign up for it, so it is set out in full.
The directory describes sourcing agents, importation coaches and suppliers who advertise publicly on TikTok, Instagram, YouTube and LinkedIn. Some are companies; some are individuals trading under their own name or handle. Either way, we treat what we publish about them as personal information and hold ourselves to the rules below.
| What we publish | Source |
|---|---|
| Display name, handle, platform, and a link to the profile | The public profile itself |
| Category, product type, and the countries served | Assessed from public posts |
| Contact details | Only where the seller published them publicly, e.g. in a bio |
| Quotes from buyer comments | Public comments left under the seller’s own public posts |
| Two or three images | The seller’s own public posts, republished with a link back to each |
| A trust signal from 1 to 5 | Computed from the above — an observation, never an endorsement |
No seller pays to be listed, and no seller can pay to rank. Listing is not a commercial relationship and never has been. We sample public posts and the comments underneath them, and we re-check the directory weekly.
Our lawful basis is legitimate interest — helping buyers in a market with a well-documented fraud problem assess who they are about to send money to, using only information the trader chose to publish. We have weighed that against the interests of the people listed, which is why the directory carries no private information, no unverified allegation, and no contact detail the seller did not publish themselves.
If you are listed and want something changed or removed, email support@madhousewallet.com from an address or account we can tie to the listing. You can ask us to correct a fact, remove a specific quote or image, or take the listing down entirely. We do not require a reason, and we do not charge for it. Removal means the listing stops being served — we keep a record of the request itself so the weekly refresh cannot quietly put it back.
Cookies and what is stored on your device
One cookie is essential. The rest are analytics and advertising, and they are switched off by default for visitors in the UK and EEA.
| Name | Type | Purpose |
|---|---|---|
| mw_sess | Essential cookie | Keeps you signed in. Not readable by scripts. Expires on sign-out |
| mw_directory_view | Stays on your device | Remembers your filters and page so the Back button returns you to the same view |
| _ga, _gcl_* | Analytics / advertising | Google Analytics and Google Ads measurement |
| reCAPTCHA cookies | Security | Only where reCAPTCHA is enabled, to tell people from bots |
We use Google Consent Mode. For visitors in the UK and the European Economic Area, advertising and analytics storage are denied by default before any Google tag runs. We do not currently advertise to those regions; if that changes, a consent banner will appear before anything is set.
Analytics and advertising
We measure which pages bring people to the directory and whether they sign up. We do not sell anything about you, and we never have.
We use Google Analytics and Google Ads. Where you create an account or subscribe, we report that to Google Ads as a conversion so we know which advertising is worth keeping. To match that conversion to a click, Google supports sending a customer identifier.
We send your email address only as an irreversible SHA-256 hash, computed in your browser. The raw address is never placed where an advertising tag can read it. Google cannot recover the address from the hash; it can only compare it to a hash of an address it already had.
Two things we deliberately do not send: nothing about the amount or destination of any payment, and no paid directory content. Reviews and sentiment behind the subscription never leave our servers for an advertising platform.
Who else processes it
Every company below is a service we run the site on. None of them is given your information to use for their own purposes.
| Who | What for | What they receive |
|---|---|---|
| Stripe | Subscription billing and identity checks | Your email and payment details you enter on their page |
| Amazon Web Services | Hosting, sign-in email, image delivery | Your email address, to send you a code |
| MongoDB Atlas | The database | Everything described above, stored |
| Analytics, tag management, advertising, reCAPTCHA | Usage data; a hashed email on a conversion | |
| Madhouse Wallet | The payment rail, if you use it | What a payment needs: amount, recipient details, your contact details |
The payment rail is operated by a separate company and handles your payment information under its own privacy policy and its own regulatory obligations. MoneyWave is a customer of that product, not the provider of the payment service.
How long we keep it
Everything with a natural expiry has one set in the database rather than left to a cleanup job someone remembers to run.
- Sign-in codes — deleted automatically 10 minutes after they are issued, and immediately once used.
- Sessions — deleted automatically when they expire, and on sign-out.
- Your account, reviews and saved sellers — until you ask us to delete them.
- Subscription records — kept while the subscription is active and afterwards for as long as tax and accounting rules require.
- Payment records — retained by the payment provider under its own regulatory obligations, which are longer than ours and which we cannot shorten.
Your rights, and how to use them
Email us and we will do it. You do not need to cite a regulation and we will not ask you to.
- See what we hold about you.
- Correct anything wrong.
- Delete your account and everything tied to it.
- Object to a listing that describes you or your business.
- Take your data with you, in a machine-readable form.
- Complain to your local data protection authority if we get it wrong.
Write to support@madhousewallet.com. We aim to answer within 30 days. Deleting your account removes your reviews from public view; the seller's total review count is recalculated so nothing is left pointing at a person who is gone.
How it is protected
The design does more of the work here than any promise could.
- Sign-in codes are stored only as keyed hashes, so a copy of the database cannot be replayed into anyone’s account.
- The session cookie cannot be read by scripts running on the page.
- Paid directory content is filtered out on the server before a page is sent, so it is absent from the page rather than hidden in it.
- Everything travels over an encrypted connection.
No system is perfect. If you believe you have found a security problem, email support@madhousewallet.com and we will take it seriously.
Where your information goes
Our servers and service providers are primarily in the United States, and the directory serves readers across Africa, Europe and elsewhere.
Using the site means your information is processed in countries that may have different data protection rules from your own. Where information moves out of the UK or the European Economic Area, we rely on the standard contractual protections our providers offer for those transfers.
Children
This is a service for businesses. It is not directed at anyone under 18, and we do not knowingly collect information from them.
If you believe a child has created an account, tell us and we will remove it.
Changes to this policy
When we change something that matters, we update the date at the top of this page and, for material changes, tell account holders by email before it takes effect.
Contact us any time at support@madhousewallet.com.