Privacy policy

• We collect what you give us: your email, what you post, and what you record in your tracker.
• Your tracker, expenses, visits and tax settings are private to you. We do not sell your records to anyone.
• Your posts, reviews and line reports are public, because that is the point of them.
• We advertise on Google and we use Google Analytics to see which pages get used. Both run on every page. Neither can see your tracker, and a browser sending Global Privacy Control gets no cookies and nothing identifying from either.
• You can export everything or delete your account yourself, in Account → Your data.

Salesift is operated by the site owner, contactable at hello@salesift.app. For data-protection purposes that person is the data controller.

When you create an account

• Your email address, and a password (stored only as a secure hash by our authentication provider, never in readable form).
• If you sign in with Google: your name, email address and profile picture from Google. Nothing else, and we cannot read your Gmail, Drive or contacts.
• A username and display name, which are public.

When you use the app

• Your home base. A ZIP code or address you type, or your device location if you tap “use my current location”. We store the resulting point and your search radius. It is private to you. We never store a continuous location history.
• Searches and alerts. Saved searches and the sales already announced to you, so alerts do not repeat.
• Public contributions. Finds you post (photos, caption, tags, optional price and buy link), comments, reviews of companies and shops, line reports, sales you submit, and shops you add.
• Private records. Sales you logged visiting, items you bought and what you paid, resale listings, business expenses and mileage, and your tax-estimate settings (filing status and a rough figure for other income). Only you and the technical administrator can see these.
• Points. A record of points earned for contributions.
• Photos. Stored in our file storage. Photos on posts and reviews are public; photos on purchases, receipts and sale visits are private to you.
• Notifications. If you turn on push alerts, a browser subscription and your browser’s user-agent string.

When you connect a sales channel

If you link Discogs (or later eBay or Etsy), we store an access token, encrypted, and read your own sales: item titles, prices, fees, shipping and dates. We do not read buyer names or addresses, we never write anything to those accounts, and we delete the tokens when you disconnect.

Automatically

• A session cookie so you stay signed in, and a short-lived cookie during a sales-channel connection.
• Standard server logs from our hosting providers, including IP address, kept briefly for security and debugging.
• Google’s advertising tag. We buy search advertising, and every page carries Google’s tag so that Google can tell us whether somebody who clicked one of our ads went on to create an account.
• Google Analytics. Every page also reports a visit to Google Analytics, so we can see which parts of the site get used, on what kind of device, and where people give up. We look at it in totals; we do not use it to follow one named person around.

Between them those two tags set cookies in your browser and send Google the address of the page you are on, your IP address and your browser’s user-agent string. They are never sent the query string — the part of an address after a “?” — because sign-in and password-reset links carry one-time tokens there, and those are nobody else’s business. They are not given your email address, your tracker, your purchases, your expenses or anything else inside your account.

Those are the only two trackers on the site. We build no advertising profiles of our own, and we do not upload customer lists to any advertising platform.

How to refuse them. If your browser sends the Global Privacy Control signal, we tell Google before either tag does anything that it has no consent to store or to personalise: no cookie is set, and nothing that could identify you is sent. Google’s script is still fetched, which is one request and nothing more. Blocking trackers with your browser or an extension works here as it does anywhere else, and you can turn off personalised advertising in Google’s own Ad Centre. Nothing on this site stops working if you refuse it.

We use your information to run the account you asked for (contract), to keep the service safe and working (legitimate interests), and, where the law requires it, with your consent, which you can withdraw: device location and push notifications are both opt-in and can be turned off in your browser or phone settings at any time.

We do not sell your data. What goes out to Google is described above: that a click on an advertisement became a sign-up, and that a page was visited. Neither is told who you are or what is in your account. We use these service providers:

• Supabase (United States): database, sign-in and photo storage.
• Vercel and Railway: hosting for the website and background jobs.
• Google Maps Platform: maps, and turning addresses into map points. Also Google Sign-In, if you use it.
• Google Ads: measuring whether the search advertising we pay for brings anybody, as described above.
• Google Analytics: counting visits and which pages get used, as described above.
• Mapbox: an alternative map provider, used only if configured.
• Resend: sending alert and account emails.
• Anthropic: categorising sale listings. Only the public listing text is sent, never your personal data.
• Discogs, eBay, Etsy: only if you choose to connect an account.
• Push notification services run by your browser maker (Apple, Google, Mozilla), if you turn push on.

We may also disclose information if the law requires it, or to protect people from harm.

• Account data: until you delete your account.
• Public posts, reviews and line reports: until you delete them, or your account.
• Private tracker, expense and visit records: until you delete them, or your account.
• Sales-channel tokens: until you disconnect that channel.
• Server logs: a short period set by our hosting providers.

In the app, under Account → Your data, you can:

• Export everything we hold about you as a file.
• Delete your account, which removes your profile, posts, private records and points.

Depending on where you live, you may also have the right to correct information, object to certain uses, or complain to a data protection authority. Email hello@salesift.app and we will help. We do not charge for any of this, and we will not treat you differently for asking.

We do not sell personal information. California law uses “sharing” to mean disclosing personal information for cross-context behavioural advertising, and the Google advertising tag described above can fall within that meaning, so we will not claim otherwise. To opt out: send Global Privacy Control from your browser, which we honour by refusing consent for both tags before either runs; or block them with an extension; or email us and we will confirm it in writing.

Sign-in is handled by our authentication provider; we never see your password. Every database table is protected so that one member cannot read another member’s private records. Sales-channel tokens are encrypted before they are stored. No system is perfect, so please use a password you do not use elsewhere.

Our database and files are hosted in the United States. If you use the service from outside the United States, your information is transferred there.

Salesift is not for children. You must be at least 13 years old to create an account, and at least 16 where local law requires it. If you believe a child has created an account, email us and we will remove it.

If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top always shows the current version.

Questions, requests or complaints: hello@salesift.app. See also our terms of service.