Privacy policy

Short version: we do not keep your photos, an account is optional, and nothing you upload is published anywhere. The detail below explains exactly what is collected, who else touches it, how long it stays and how to have it removed.

What this service does with what you send

To produce an estimate we need whatever identifies the item: a photograph, a barcode, a short description, or the address of a listing. That input is used for one purpose, which is answering the question you asked. It is not used to build a profile of you, it is not sold, and it is not shared with anyone except the processors listed below who are needed to deliver the answer.

Photos

Photos are resized in your browser before they are uploaded, which means the full-resolution original never leaves your device. Our server passes the resized image to a third-party AI provider to identify the item, and then discards it: the images exist in memory for the length of the request and are not written to disk or kept in any store we control.

If you are signed in, one small thumbnail of roughly 120 pixels is saved alongside the estimate, so your history is recognisable at a glance. That thumbnail is the only image retained, it is visible only to you, and deleting the estimate deletes it. The AI provider processes the images it receives under its own API terms and its own retention policy, which we do not control.

Pasted links

When you paste a listing address, our server fetches that page to read its title, price and description. The request comes from our server rather than from your browser, so the site you linked to does not see your IP address. We read only the page you gave us, we do not follow links found on it, and we keep only the few facts extracted for the estimate.

What is stored, and why

• An anonymous device cookie. A random token in an httpOnly cookie so your recent estimates and your remaining free count follow this browser. It contains no personal information and is not readable by scripts on the page.
• Your estimates. The item name, value range, the details of the result and the thumbnail. Guests keep these on the device; signed-in users keep them on the account, and estimates made as a guest are merged into the account on first sign-in from that browser.
• Account details, if you create one. Your email address, an optional display name, and either a hashed password or the name and profile picture supplied by Google if you sign in that way. We never store a password in a readable form.
• Your IP address, in memory only. Used to stop one person consuming the free allowance repeatedly and to rate-limit verification emails. It is held in the running process and resets daily; it is not written to a database.
• Server logs. Standard request logs kept for security and troubleshooting, and rotated.
• A market preference. Which country you chose to price against, kept in your browser’s local storage so you do not have to pick it again. It never reaches our server.

Who else processes your data

• An AI model provider receives the item input in order to produce the estimate. This is the only third party that sees your photos.
• An email provider sends verification and password-reset codes, and therefore receives your email address, only if you create an account.
• Google receives nothing unless you choose to sign in with Google, in which case the sign-in happens on Google’s side and we receive your name, email and picture. Separately, if analytics is enabled on this site, Google Analytics receives standard page-view data.
• Marketplaces see nothing until you click a link to them, at which point you are on their site under their own privacy policy. Some of those links carry affiliate tracking.

Cookies

The device cookie described above is strictly necessary: without it the free allowance cannot be counted and your history cannot follow you. If you sign in, a session cookie keeps you signed in. Analytics, where enabled, sets its own cookies and can be blocked by your browser or an extension without affecting anything else on the site. We do not use advertising or cross-site tracking cookies.

How long things are kept

Photos are not kept at all. Estimates and their thumbnails stay until you delete them or delete your account. Account records stay until you ask for them to be removed. Verification codes expire after ten minutes and are stored hashed. Rate-limiting counters reset every day. Server logs are kept only as long as they are useful for security and diagnostics.

Your rights

Depending on where you live, you may have the right to access the personal data held about you, to have it corrected, to have it deleted, to receive a copy in a portable form, and to object to or restrict certain processing. You can exercise the most common of these yourself: single estimates can be deleted from your account page at any time. For anything else, including deleting your whole account and everything linked to it, send a request through the contact page from your account email address and we will act on it.

We will not charge you for making a request and we will not treat you differently for making one.

Children

This service is not directed at children and accounts are not intended for anyone under 13, or under the minimum age in your country if it is higher. If you believe a child has created an account, contact us and we will remove it.

Security and transfers

Traffic is served over HTTPS, passwords are stored hashed, and the device cookie is httpOnly. The providers described above may process data in other countries, including the United States. No method of transmission or storage is completely secure, and we do not claim otherwise.

Changes

If this policy changes in a way that affects what is collected or who sees it, the updated version will be posted here. Continuing to use the site after a change means the updated policy applies.

Contact

Use the contact page and choose “Privacy or account request”, or email [email protected].