Privacy Policy

Account data: your name, email address and a hashed password. We never store your password in readable form.

Ticket data: the subject, messages, optional contact handle and any listing reference attached to a ticket you create.

Technical data: your IP address and request headers, used for rate limiting and abuse prevention.

To authenticate you, to run the support ticket system, to protect the platform from spam and brute-force attempts, and to keep a record of what was agreed in a transaction.

We do not sell your data and we do not share it with advertisers.

We set a signed, HTTP-only session cookie when you sign in. It contains a token identifying your session and nothing else. There is no third-party advertising or tracking cookie on this site.

Listing images are stored with our image hosting provider. Application data is stored in our managed database. These providers process data on our behalf under their own security commitments.

Ticket history is retained while your account is active because it is your record of the transaction. Request deletion at any time through a ticket and we will remove your personal data, keeping only what we are legally required to keep.

You can request access to, correction of, or deletion of your personal data. Raise a ticket from your account and we will respond within a reasonable period.

Passwords are hashed, sessions are signed, admin sign-in is rate limited and locks after repeated failures, and uploads are restricted by type and size. No system is perfectly secure, so use a unique password here.

This site is not directed at children under thirteen and we do not knowingly collect their data.