How Sou9na uses and protects your personal data, in line with Moroccan law no. 09-08.
Last updated: 30 October 2026
Sou9na (sou9na.ma) is published by Othmane Zergoun, a private individual, Fès, Morocco, who is the data controller under Moroccan law no. 09-08. Contact: To be completed. CNDP declaration: declaration in progress.
Account: email address, display name, optional city and phone number, optional profile picture, confirmation that you are an adult and the date of your consents. Listings: texts, price, category, city, photos, and where you say you sold an item (“Sold on Sou9na?”). Exchanges: messages, photos and offers sent in chat (visible only to the two people in the conversation), reviews, reports, feedback sent through the Assistant, and messages with the moderation team. Payments: orders, amounts, status and any note added to a bank transfer. Store or advertiser account: the business details you enter. Technical: the security information described below.
Card numbers: card payments happen on YouCan Pay's secure page. Your date of birth (we only keep the fact that you are 18 or older). No advertising or tracking cookies, and we never sell or rent your data.
To run your account and listings, deliver messages and notifications and process payments (performing the service you ask for); to keep the platform safe and prevent scams, spam and forbidden items (legitimate interest in protecting users); to keep payment records (legal obligation); for phone notifications and optional communications (your consent, which you can withdraw at any time).
To protect users, some checks are automatic: safety tips appear under messages that look like a scam (this runs in your browser, nothing is sent); a listing containing a word that matches a forbidden item is put on hold; an account with unusual activity (the same message sent to many sellers, several reports, reviews or sales that look arranged, collecting phone numbers) is flagged to the moderators; limits apply to the number of listings, messages and phone numbers viewed. None of these checks blocks an account or deletes a listing on its own: a team member reviews and decides, and you can always reply to the team.
Visits to the site and to listings are counted with a one-way code made from your connection, valid for one day and erased after 2 days, without cookies: we only keep daily totals (pages, where visits come from such as Google or a WhatsApp link, phone or computer). Sellers see totals of views, visitors, favorites, shares and contacts for their listings, never who. Your own visits to your listings are not counted. Words typed in the search box are kept as daily totals, with no link to who searched, and never if they look like a phone number or email. Views and clicks on promotions and ads use a similar code, erased after 30 days.
Your display name, member-since date, city if you add it, active listings, published reviews, your usual reply time and your number of successful sales on Sou9na. In a chat, the other person may see “New member” if your account is less than 7 days old. Your phone number is shown only to logged-in members, after a tap, and only if you choose to show it. Your email, consents and role are never shown.
Some conveniences stay on your device and are never sent to us: the listing you are writing (text and lighter photos, erased after publishing or after 14 days), recently viewed listings, your comparison list, your language and theme choices, and an invitation code from a friend's link (30 days).
Supabase (database, login, photos — servers in the European Union); Netlify (website hosting, United States); Cloudflare Turnstile (anti-bot check on login forms, United States); YouCan Pay (card payments, Morocco); your browser's push service (Google, Apple, Mozilla or Microsoft), only if you turn on notifications; the provider that sends account emails. They use your data only to provide this service to us. Some data is therefore stored or passes outside Morocco; these transfers go through the procedures required by law 09-08 with the CNDP, and you are told about them when you create your account.
Account, listings, messages and reviews: until you delete your account. Photos of sold, expired or removed listings: deleted after 90 days. Payment records: as long as Moroccan accounting law requires, even after account deletion (without your profile). Feedback sent through the Assistant: 2 years. Closed account checks: 1 year. Phone-number views: 90 days. Anti-abuse counters: 1 day. Visit codes: 2 days. Promotion and ad statistics codes: 30 days. Read notifications: 6 months. Unused login devices: 1 year.
Access to every piece of data is restricted by database rules, private fields are hidden from other users, passwords are handled by Supabase and never visible to us, the admin team uses two-step login, every moderation action is logged, and the site uses HTTPS only.
Under law 09-08 you can access your data, have it corrected, object to its processing for a legitimate reason and ask for it to be deleted. In Account → Settings you can download your data and delete your account yourself. For anything else, write to To be completed from the address linked to your account: we answer within a reasonable time, at most 30 days. You can also complain to the CNDP (www.cndp.ma).
To warn you about logins from a new device, we keep for each device a short label (e.g. “Chrome on Android”), the approximate city and the first and last login dates, never the IP address. You can remove devices in Account → Security.
Only if you turn them on, device by device, and accept your browser's request. We then keep the technical address provided by the browser (with its encryption keys), a short device name, the kinds of notifications you chose and the date of your agreement. Notifications never contain your messages or advertising. You can stop them at any time; logging out stops them on that device.
Only the cookies needed for the site to work: your login session, a random device identifier for the new-login alert, and your language and theme choices. No advertising or audience-measurement cookies. If this ever changes (for example to show ads), we will ask for your consent first.
Sou9na is only for people aged 18 and over. If you think a minor has created an account, report it and the account will be deleted.
We may update this policy, for example when a feature changes. The date of the last update is shown at the top of the page; for important changes we will tell you on the site or by email.