Privacy Policy

Account data — Your email address, display name, and a unique identifier from PocketID (our authentication provider). We don't store your password — authentication is handled entirely by PocketID.

Device ownership records — Devices you add to "My Devices", along with any optional details you provide: purchase date, cost, serial number, location, service history, and receipt photos. This data is private to your account.

Location data — Physical locations you create (name, address, coordinates) for organising your owned devices. This data is private to your account and is never shared publicly.

Marketplace activity — Listings you create (and their edit history), photos you add, messages you send, and your saved searches. Listing content (device, condition, price, photos, approximate location) is public; location data is removed from photos when you upload them. Message content is private between buyer and seller.

Repair Pro profiles — If you register as a Repair Pro, your profile (name, service area, contact details you choose to provide) is publicly visible in the directory.

Reviews and guides — Content you submit is associated with your screenname and is publicly visible once approved.

Login events — We log when you sign in and sign out, along with the IP address and browser used. This is for security purposes (detecting unauthorized access).

We don't run analytics scripts, ad trackers, or third-party pixels. We don't sell or share your personal data with advertisers or data brokers.

All data is stored in our self hosted database. Authentication is handled by our self hosted PocketID.

Uploaded files (receipt photos) are stored on a local volume on the same server. They are accessible only to your account.

You can delete your account at any time by contacting us. Account deletion removes your personal data from active storage. Some records (such as audit logs) may be retained for a limited period for security purposes.

You can request a copy of your data or ask questions about how it's used by getting in touch.

We use one session cookie to keep you logged in. It is httpOnly, Secure, and SameSite=Strict — it cannot be read by JavaScript and is not shared cross-site. We don't use tracking or analytics cookies.