Keeping the account separate

A marketplace account is a profile: what you buy, what you pay, where the money came from. Security for it is mostly subtraction. Fewer connections between the account and your public identity, fewer places the credentials live, fewer habits that sketch the shape of your activity.

Credentials

Use a password you do not use anywhere else, and an email address that belongs to nothing important. The email does not need to be anonymous. It needs to be yours alone. If the same password opens your market account and your photo hosting, a breach on either side is a breach on both.

The device

The clean setup is a machine that does nothing else: a spare laptop, a small VPS with a desktop, a phone that does not carry your name. The realistic setup is a dedicated Tor Browser profile on your normal computer, used only for the market, with no synced history and no shared passwords. Neither is perfect. Both work if the separation stays consistent.

PGP

The market uses PGP for private messages between you and vendors. Generate a keypair, put the public key in your profile, and keep the private key on paper or on a machine that is not your daily driver. A private key stored in the same cloud folder as your shopping list is not really private.

Money

Pay from a wallet that is not your main one. The amounts moving between an exchange, a wallet, and a market are readable by anyone who watches the chain. Keep the market wallet small, and top it up in amounts that do not line up with your salary.

What this site keeps

Nothing. No forms, no accounts, no cookies set by this domain, no analytics. The only things it sends you are the address strings and the text you are reading. The only things it asks are attention and a careful copy-paste.