Accounts and advert privacy

Your account email stays private and is not verified by email. We store a salted password hash, a hashed recovery key and expiring session tokens. Your name, advert description, location and other advert fields are public only after moderation. Use a public display name and do not post sensitive data. Messages are visible to their participants and the operator when investigating abuse.

We use these records to provide accounts, publication and messaging under our service agreement; security and moderation rely on legitimate interests. Cloudflare processes the data and may process it internationally. Sessions expire after seven days. Messages are deleted after 90 days, and closed adverts after 90 days. You can delete your account in the account page; messages already sent to others remain for their retention period. Essential session cookies keep you signed in. No payment data is collected at present.

Request access, correction, deletion or complain through Contact the administrator. You can also complain to the ICO. See the privacy policy for more information. Public identification of the operator remains pending.