Privacy Policy

• Account information — your name and email address, used to sign you in and to contact you about bids, wins, and pickups.
• Listings you create — titles, descriptions, categories, condition, prices, and the photos and condition videos you capture.
• Capture metadata on media — when you photograph or film an item in-app we record the capture time, camera details, and (when your device shares it) approximate GPS coordinates. This is an anti-fraud signal that helps verify a listing is a real, freshly-captured item.
• Location — a sale's pickup address (entered by the seller), and a coarse buyer location you optionally set to sort listings by distance. We store the latter in a cb_loc cookie and on your account.
• Payment information — handled by Stripe. We never see or store your full card number; Stripe gives us a token and the platform-fee charge status.
• Usage data — items viewed, watched, and bid on, plus basic technical logs needed to run and secure the service.

To run the marketplace: show listings, sort them by distance, run the falling-price auction, match standing bids, charge the platform fee, coordinate pickup, and send you transactional notifications. We also use it to detect fraud and abuse (for example, flagging photos that appear to come from a virtual camera rather than a live capture) and to provide customer support.

A seller's exact pickup address is never shown publicly. On browse and item pages we display only an approximate area — the map marker is randomly offset by roughly 150 metres, and we show a neighbourhood label rather than a street address. The precise address is shared with a buyer only after they Buy Now or win a standing bid, so the two of you can arrange the handoff.

We share data only with the service providers needed to operate ClearByDate:

• Stripe — payment processing and platform-fee charges.
• Cloudflare — hosting and media storage (your photos and condition videos are stored in Cloudflare R2).
• Google — Places and Maps for location search and the static privacy map; an item's photos may be sent to Google's Gemini API to auto-generate search tags and descriptions where that feature is enabled.
• Our email provider — to deliver sign-in links and transactional notifications.
• Google Analytics — aggregate, privacy-respecting usage analytics (page views, traffic sources). These are non-essential cookies set only with your consent where required (see Cookies below).

We do not sell your personal information. We may disclose information if required by law or to protect the safety of our users.

Essential cookies are required for the service: a session cookie to keep you signed in, and the cb_loc cookie that remembers the location you chose for distance sorting. These are always on — without them the site can't function.

Cookieless analytics. Our baseline traffic analytics (Cloudflare Web Analytics) sets no cookies and collects no personal data, so it runs without a consent prompt.

Analytics cookies (Google Analytics) are non-essential and only load after you accept them in our cookie banner. You can decline — the site works the same — and clear cookies or withdraw consent in your browser at any time.

We keep your account and listing data while your account is active. Delisted or collected items and their media are removed or anonymised when they are no longer needed for support, disputes, fraud prevention, or legal obligations.

Where the GDPR applies, we rely on these legal bases:

• Contract — to provide the marketplace you signed up for: listings, bidding, the auction, charging the platform fee, and coordinating pickup.
• Legitimate interests — to secure the service and prevent fraud (e.g. media-provenance checks), and to keep the marketplace working reliably.
• Consent — for non-essential analytics cookies. You can withdraw it at any time.
• Legal obligation — to comply with tax, accounting, and other laws.

You can update your account details, delist items, and withdraw standing bids from within the app at any time. Where the GDPR applies, you also have the right to:

• Access a copy of the personal data we hold about you.
• Rectify data that's inaccurate or incomplete.
• Erase your data ("right to be forgotten"), subject to legal retention.
• Restrict or object to certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent for analytics at any time, without affecting prior processing.

To exercise any of these, email support@clearby.app. We respond within one month, as the GDPR requires.

Some of our service providers (e.g. Stripe, Cloudflare, Google) process data outside your country, including in the United States. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

If you're in the EU or UK and believe we've mishandled your data, you can lodge a complaint with your local data protection authority. We'd appreciate the chance to resolve it first — please reach out to us.

Questions about this policy? Email support@clearby.app or see our contact page.