Privacy Policy

This policy describes what data Stoople collects, why we collect it, and what you can do about it. It is written in plain language on purpose. If anything is unclear, get in touch on the contact page.

What we collect

• Account info. If you sign up with email, we store your email address, a hashed password, and the display name you choose. If you sign in with Google, see Signing in with Google below.
• Sales you post or sight. The title, description, address, time, and photos you publish. These are public, anyone visiting Stoople can see them.
• Saved sales. If you favorite a sale while signed in, we remember which ones so they appear in your account drawer.
• Approximate location. We use your IP address to guess your nearest city on first visit. If you grant location permission, we use that briefly to pick a better default. We do not store your precise coordinates.

Signing in with Google

You can create a Stoople account or sign in using your Google account. This is optional; email and password sign-up works the same way.

• What we receive from Google. Only the basic profile access you approve on Google's sign-in screen: your email address, your name, your profile picture URL, and a Google account ID. We do not request access to your Gmail, contacts, calendar, Drive, or any other Google data.
• How we use it. Solely to create your Stoople account, sign you in, and show your name on your account. Your email address is used for account-related messages only (see Email below).
• How we store it. It is stored with your account in our authentication database at Supabase (see Where data lives). We never see or store your Google password.
• Sharing. We do not sell, rent, or share Google user data with anyone, and we do not use it for advertising. We do not use it to train AI or machine-learning models, and we do not use Google APIs to generate images or other content.
• Deleting it. Ask us on the contact page to delete your account and the Google data we stored with it goes too. You can also remove Stoople's access at any time from your Google account settings.

Stoople's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we don't do

• We don't sell your data.
• We don't run ad-network tracking pixels.
• We don't share your saved sales with anyone.

Where data lives

Your account, sales, and photos are stored with Supabase, a hosted Postgres provider. The site itself is deployed on Vercel. Both are bound by their own privacy policies.

Email

We use your email address only for account-related messages: confirming your sign-up, password resets, and material changes to this policy. We do not send marketing emails.

Cookies

We use a small number of strictly necessary cookies to keep you signed in. We do not use analytics or advertising cookies.

Your rights

You can delete your account at any time by writing to us (see the contact page). When you do, your account row (including any data received from Google sign-in), your saved sales, and any sales you posted will be removed.

Changes to this policy

We'll update the “Last updated” date above whenever this changes.