Privacy Policy
Last updated: [DATE]. Data controller: [LEGAL ENTITY], [ADDRESS], [CONTACT EMAIL].
What we collect
Account details (email, display name, handle, a hash of your password — never the password itself); what you list (titles, descriptions, declared values, photographs); your trading area if you choose to give one; offers, messages, and reviews; technical records (IP address, user agent) kept in security audit logs.
What we do to protect you by design
Uploaded photographs are re-encoded before storage, which removes EXIF metadata — including the GPS coordinates cameras attach. Contact details posted in trade messages are redacted before delivery. Private-inventory items are not browsable and are shown only inside offers you put them in. Passwords are checked against known breach lists at the point you choose them.
What we use it for
Operating the marketplace (showing your listings, delivering offers and messages), account security (session management, rate limiting, audit logs), and the notifications you opt into. We do not sell personal data, we run no third-party advertising or analytics scripts, and emails are sent only for account verification, password resets, and trade events.
Push notifications
If you enable them, we store the delivery endpoint your browser or device gives us. Disabling them, or revoking permission, removes it.
How long we keep things
Account data for the life of the account; completed-trade records and reviews for [RETENTION PERIOD]; security audit logs for [RETENTION PERIOD]; expired session and verification tokens are purged automatically within days.
Your rights
You may access, correct, export, or delete your data — [DESCRIBE MECHANISM: in-app and/or by writing to CONTACT EMAIL]. Residents of [EU/UK/CALIFORNIA] have additional statutory rights; requests go to [CONTACT EMAIL] and are answered within [30] days.
Processors
Infrastructure providers who process data on our behalf: [HOSTING — e.g. DigitalOcean], [DATABASE — e.g. Neon], [EMAIL — e.g. Postmark], [PUSH — Expo, for the mobile app]. Each is bound by its own data-processing agreement.
Changes and contact
Material changes will be announced on the site. Questions and requests: [CONTACT EMAIL]. See also the Terms of Service.