Privacy Policy
Last updated: April 2026
1. What we collect
We collect your email address (for authentication), any profile information you choose to add (username, display name, location, social links), listings you create, messages you send, and collection items you add. We also collect standard server logs (IP addresses, request metadata) for security purposes.
2. How we use it
Your data is used to operate the marketplace: displaying your listings and profile to other users, sending message notifications to your email, and maintaining your account. We do not sell your data to third parties. We do not run targeted advertising.
3. Email
We send transactional emails only: account verification, password resets, and notifications when you receive a message on a listing. We do not send marketing emails. Transactional email is handled by Resend.
4. Third-party services
We use Supabase (database and authentication), Vercel (hosting), and Resend (email). Each has their own privacy policy. Avatar images are generated by DiceBear and loaded from their CDN.
5. Your rights
You can delete your account at any time by contacting us. Upon deletion we will remove your profile, listings, and messages from our database. Some data may remain in backups for up to 30 days.
6. Cookies
We use a single session cookie to keep you logged in. No tracking cookies, no analytics cookies, no third-party ad cookies.
7. Contact
For privacy questions or data deletion requests: zgarage.toys@gmail.com