Data and privacy

Updated November 5, 2026.

What the marketplace stores

Accounts store a name, email address, hashed password and account timestamps. Sessions can record IP address and browser information for sign-in security. Listings, seller photos, saved equipment and buyer–seller messages are stored to provide the marketplace. Saved searches store your chosen search terms and filters in your account. Approximate listing-area references, structured specifications, reservation expiry and public seller descriptions support discovery. Private shortlists, listing templates, inventory import jobs and reviewed publication snapshots support buying and seller workflows. If a seller chooses to answer the final-handover question, we store their private response about where they found that buyer. This is seller-reported feedback. Stock quantities, private reservation participants, availability confirmations and policy acknowledgements support inventory management. Offers, immutable revisions, agreed prices, appointment times and private logistics support direct trade coordination. Wanted requests and their separate private response threads support equipment requests. Linked collections reference existing equipment. Notification preferences, explicit search subscriptions, reference-only source events, price baselines, read states and processing checkpoints support on-site updates. Background job controls retain bounded request identifiers and outcome counts to prevent duplicate processing; they do not store private message text. Reports, blocks and moderation audit records support abuse handling. Support requests store the information you submit, requester/operator replies and private operator audit notes.

Who can see it

Your seller name, optional public seller description/type/service area and published equipment details are public. Equipment coordinates represent an approximate area, not a private pickup address. Saved searches, named shortlists, listing templates and inventory exports are private to their owner. Support requests are available to their signed-in creator, anyone holding their private receipt, and authorized operators; internal operator notes are not included in requester replies. Reporters see safe review states and outcome categories, not internal moderation notes. Account email addresses are not included in public seller profiles. Drafts and unattached photos are private to their owner. Messages, private offers, agreed terms and appointment addresses are available to their participants. Wanted-request replies are private to the requester and each responder; other responders cannot see them. Published wanted requests and equipment collections are public, while paused wanted requests and draft collections are private to their owner. Notification preferences, subscriptions and inbox entries are private to their owner; authorized operators can run bounded notification processing without seeing private message bodies. Authorized moderators can review necessary context from reported content or a reported conversation through an audited review action. A report does not grant access to unrelated private content. Infrastructure administrators have access required to operate and maintain the service.

Service providers

Cloudflare hosts the application, database and photo storage. Google Fonts receives the network request needed to load the site's fonts. If email features are enabled, Resend processes the address and content of account emails; an email alert must not include a private message body. Table it currently does not process payments.

Cookies and local storage

Secure session cookies keep you signed in. Guest favorites, comparisons and your last chosen search area/radius are saved in this browser. A support receipt can be saved deliberately as a private link or downloaded file. Message drafts are held in memory and cleared on sign-out. No advertising tracker is included by this release.

Operational measurement

We store aggregate daily request counts, response status codes and total processing time by feature. These counters contain no email addresses, IP addresses, search text, message bodies, account IDs or reset tokens. Aggregate counters older than 90 days are removed as requests are processed. Local and production databases are separate.

Removal and retention

Removing a listing hides it from public discovery. Prior participants retain their conversation history. Signing out revokes the session. Deletion is not a promise of immediate erasure from participant history, moderation evidence or backups. A fixed retention schedule and self-service account deletion are not available in this release; contact the operator through an available support channel for a data request.

Contact the team

Open a private support request for account help, a moderation appeal or a data request. Replies appear in the support page. Save your private receipt if you cannot sign in; it gives access to that request only and does not verify account ownership. No email notification or response-time guarantee is promised.

Do not send passwords, reset links, identity documents or payment details.