Privacy Policy

What we collect

When you sign up:

• Your email address.
• A password you choose (stored securely by our authentication provider, Supabase; we never see or store the password itself).
• An auto-generated anonymous display name (e.g. “QuietWombat22”). This cannot be changed and does not identify you.

When you create a listing:

• The listing details you enter: title, description, price, category, location (suburb and city), and up to 5 photos.
• An optional “sell story” (why you'd sell).

When you make an offer:

• The offer amount and your user ID.

When you send a message:

• The message content and your user ID.

When you receive a message or your offer is accepted:

• We send you an email to let you know. The email contains the listing title and a link to sign in — no message content, no offer amount, no contact details.
• We only send a message email if you haven't already been emailed about that listing's thread, so you won't get spammed during a back-and-forth conversation.

When you share contact details (after an offer is accepted):

• Whatever you choose to share: first name, phone number, and/or email. This is voluntary. The other party can only see what you have shared, and vice versa.

When you save a listing:

• Your user ID and the listing ID.

When you file a report:

• The reason you selected, your written note (if any), and what you reported (listing, user, or message).
• Your user ID, so we can follow up if needed.

Your profile (optional):

• Location (suburb, city, state, country) and an avatar photo. These are optional.

What we do not collect

• We do not collect your real name (unless you voluntarily share it in the deal room).
• We do not collect your phone number (unless you voluntarily share it in the deal room).
• We do not collect your postal address.
• We do not track your browsing with analytics, advertising cookies, or tracking pixels.
• We do not log your IP address (it is used only momentarily for rate limiting and is not stored).

Photos and EXIF data

When you upload a photo to a listing, we strip all EXIF metadata (which can include the date, camera model, and GPS location where the photo was taken) before storing the file. Both the original and the thumbnail are re-encoded server-side, removing all metadata. No GPS coordinates or camera information is retained in stored photos.

Where your data is stored

• Database, authentication, and file storage: Supabase, hosted in Sydney, Australia (AWS ap-southeast-2 region).
• Transactional emails (welcome email, offer notification): Sent via Resend, a third-party email delivery service. Only the recipient's email address and the email content are sent to Resend.
• Website hosting: The frontend is hosted on Vercel; the backend is hosted on Render. Your data in transit passes through these services, but your stored data lives in Supabase (Sydney).
• Fonts: Google Fonts are loaded for display. No user data is sent to Google.

Who we share your data with

We do not sell, rent, or trade your personal information. We share data only with the services that operate the site:

What is visible to other users:

• Your anonymous display name (e.g. “QuietWombat22”).
• Your avatar, if you've uploaded one.
• Your listings (title, description, price, photos, location suburb/city).
• Your messages to them.
• Contact details you voluntarily share in the deal room.

What is never visible to other users:

• Your email address (unless you share it in the deal room).
• Your password.
• Your saved listings.
• Your offers on other people's listings (visible only to you and the seller).
• Your reports (visible only to you and us).

How long we keep your data

• Your account and listings remain until you request deletion or we remove them.
• Messages and offers remain as long as the related listing exists.
• If you delete your account, your profile, listings, offers, messages, and photos are deleted automatically.

How to request deletion

Current process (beta): Email fattei@hotmail.com and ask us to delete your account. We will do so within a reasonable time.

When you file a report

• When you file a report, we store the report (the reason you selected, your written note, what you reported, and your account ID) and email us.
• We do not include private message content in reports. If you report a message, your written description of what happened is included; the message thread itself is not.
• Reports are kept until we resolve them. You can see your own reports but not reports filed by others or against you.

Security

• Passwords are managed by Supabase Auth and are never stored in plain text or visible to us.
• Row-level security in the database ensures users can only access their own data.
• The service-role database key is never exposed to the browser.
• We use HTTPS for all connections.

Children

YesPrice is not intended for use by anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy at any time. Continued use after changes constitutes acceptance.

Contact

For privacy questions or deletion requests, email fattei@hotmail.com.