Privacy Policy
Effective August 27, 2026.
What we collect
Orders: your email and shipping address, collected by Stripe at checkout and shared with us to fulfill the order. Buylist: your name, email, declared counts, and payout details you provide. Notifications: your email, if you ask us to tell you when buying or selling reopens. Contact: whatever you write us.
What we never collect
Card numbers and payment credentials never touch our servers; Stripe processes payment entirely on their side. We run no advertising trackers and sell no data to anyone, full stop.
How we use it
To fulfill orders, run buylist submissions end to end (status emails, offers, payouts), maintain store credit ledgers, and answer your messages. Transactional email is sent through Resend. Basic site analytics, when enabled, measure page traffic in aggregate.
Where it lives
Data is stored in Cloudflare’s D1 database infrastructure in the United States. Buylist records are kept as business records for tax purposes.
Your choices
Email us via the contact page to see or delete the data tied to your email. We delete it promptly on request. The one exception is buylist purchase records, which stay in our books because they document what we paid for inventory.