Privacy Policy

Last updated: March 10, 2026

1. Data Residency

Your data lives on the Cloudflare Edge — profile data in D1, images in R2. Authentication uses passkeys (FIDO2/WebAuthn) or a hashed PIN. Plain-text credentials are never stored.

2. Location Verification

Your location is verified through the browser Geolocation API when you register, post, or message.

• Location is not tracked continuously.
• GPS coordinates are not stored.
• Verification is just-in-time and discarded immediately after.

3. Push Notifications

If you opt in, push notifications are sent for new messages, price drops, and saved search matches. Your push subscription can be revoked at any time through your browser settings.

4. Messages & Transactions

Conversation messages, transaction records, and reviews are stored as part of your account data. All of this is included if you request a data export.

5. Account Archival

Listings inactive for 30 days are automatically archived to keep the marketplace current. Bumping a listing resets its timer. Accounts that remain inactive for 90 days are permanently deleted along with their data.

6. Content Moderation

Listings may be reviewed, held for approval, or removed if they violate community rules. Accounts that repeatedly violate rules may be restricted without notice.

7. Account Termination

Accounts may be suspended or deleted for policy violations, suspicious activity, or during routine cleanup of inactive accounts.

8. Data Access & Deletion

You can export your data (profile, listings, messages, images) from the Settings tab on your Profile page. Exports are available for 7 days.

You can delete your account permanently from the same page. This removes all your data, listings, and images.