Only a username, display name and email are required. Identity documents and card details are never collected by the marketplace.
Protected by server-side session checks. Passwords are hashed by Supabase Auth and never stored by the marketplace itself.