Privacy

What we keep

• Account: your name, email address, phone number, and a scrambled (hashed) version of your password. We cannot read your password.
• Seller details: your display name, region, town, description and, if you add them, photos of an identity or business document.
• Trading: your offers, orders, delivery details, messages and photos in disputes, and notifications.
• Security records: a record of important actions (such as sign-ins and administrator decisions) and, for sessions, your browser's user-agent text.

Who can see it

• The public sees listings and seller pages: the seller's display name, region and town, and what they list. Not email addresses or phone numbers.
• The buyer and seller in an order can see each other's name and the contact details needed to finish the order.
• Verification documents are visible only to you and to staff who review sellers. Photos on orders and disputes are visible only to the buyer, the seller and administrators.
• Administrators and moderators can see the account details they need to review sellers, listings, orders and disputes.
• Questions you ask a seller about a listing are seen only by you and that seller. Visits to a listing page are counted as a number per day for its seller, with nothing about who visited.
• Messages on an order are seen by its buyer and seller, and by administrators if a dispute is opened. If you report a listing or seller, staff see your name; the person you reported does not.

Photos

Uploaded photos are checked and re-saved, which removes hidden data such as the location a phone may have recorded. They are stored in private storage with Cloudflare R2.

Where it is stored

Account and trading data is in a PostgreSQL database hosted with Neon in London. Photos are in Cloudflare R2.

Cookies

The site sets one cookie to keep you signed in, and one that remembers this browser, so we can email you when your account is signed in to from a browser it has not used before. Neither is used for advertising, and the site has no advertising tools. To count visitors, the site uses Umami, which sets no cookies and keeps no personal data: only which pages were opened, roughly from which country, and on what kind of device.

Email and SMS

We send emails about your account and orders. You can switch off emails about offers, orders, payments and disputes under Account settings, or with the link at the bottom of any of them; emails to confirm your address or reset your password are always sent. Phone verification by SMS is not switched on yet.

Your choices

You can change the details of your seller profile while it is not yet reviewed, and your name, password and email address under Account settings.

A copy of your data: under Account settings, “Download my data” gives you a file with your account, seller profile, listings, offers, orders, saved listings and notifications. Photos are not included.

Deleting your account: under Account settings, once none of your orders is still under way. Your name, email address, phone number, seller profile details and verification documents are removed, open offers are closed and your listings taken down, and you cannot sign in again. Records of finished orders, payments, refunds and disputes are kept without your contact details, because the other person and our payment records depend on them. The name shown on those orders when they were made stays on them.