Privacy policy

The short version

• We store your email, a hashed password, your display name and, if you sell, a phone number and location.
• We never see or store identity documents. Our verification provider holds those and sends us a pass or fail.
• We do not sell your data, and we do not share it with advertisers.
• Marketing email is opt in, and every message has a one click unsubscribe.
• Ask us to delete your account and we will, subject to records we are legally required to keep.

What we collect

When you register. Email address, a password we store only as a bcrypt hash, and a display name. We record the time and IP of sign ins so we can spot account takeover.

When you verify a phone. The number, whether it is mobile, landline or an internet line, and the carrier. We use this to keep throwaway accounts off the marketplace. Your number is never shown publicly.

When you list an item. Photographs, a proof of ownership image, the item serial number, your city and state, and everything you type into the listing. Photographs are re-encoded on upload, which removes embedded location data from your camera or phone.

When you get verified. Our identity provider performs the document check on their own infrastructure. We receive a pass or fail result and a reference token. No document image, number or date of birth reaches our servers.

Automatically. Standard web server logs, and a session cookie that keeps you signed in.

Why we hold it

To run your account, to publish your listings, to let buyers and sellers reach each other, to keep fraudulent and stolen goods off the site, and to meet legal obligations such as tax and records retention.

We rely on legitimate interest for fraud prevention and site security, contract necessity for running your account, and consent for marketing email.

What is public

Your display name, your general location as city and state, your badge tier, your feedback score, and anything you write in a listing or a review.

Not public: your email, your phone number, your exact address, your full serial numbers, and your identity verification result. Serial numbers appear publicly only in masked form, for example 04*******987.

Who we share it with

Service providers who make the site work, and only the data each one needs. Currently that means our identity verification provider, our email delivery provider, our SMS provider, and our hosting company. Payment providers join this list when checkout launches.

We also disclose data where the law requires it, or where it is necessary to investigate fraud or protect someone from harm.

We do not sell personal data, and we do not share it for cross context behavioural advertising.

Cookies

We use a session cookie to keep you signed in and a CSRF token to protect forms. Both are strictly necessary and cannot be turned off without breaking the site.

Your accessibility preferences are stored in your browser, not on our servers.

We do not run advertising or cross site tracking cookies. If that changes, this page changes first and you will be asked.

How long we keep it

Account data for as long as your account exists, then deleted or anonymised. Listing records and transaction history are kept longer where tax or dispute rules require. Security logs are pruned on a rolling basis. Serial numbers on the watchlist are kept indefinitely, because their whole value is outliving the sale.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email [email protected] and we will respond within thirty days.

Depending on where you live you may have additional rights, including under the California Consumer Privacy Act. We apply the same standard to everyone rather than sorting people by postcode.

Children

This site is not for anyone under 18. We do not knowingly collect data from children, and we delete such accounts when we find them.

Changes

Material changes will be announced by email to registered members before they take effect. The date at the top always reflects the current version.