Privacy policy

We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Your email address. It is the account. We need it to send the 6-digit code that verifies it's you, and to tell you when something you saved a search for gets listed.

Asking to see a seller's number does not give them yours. We verify the address so a seller isn't taking calls from nobody, and that is all it is used for. The seller is told that someone asked; they are not told who, and they never receive your email address. We don't send marketing to it and we don't sell it.

A profile photo, if you add one. Entirely optional, and public — it appears on every listing you post. Remove it from your account page whenever you like and it goes from the site. Skip it and your initials are shown instead.

Your name, phone number and email address, if you post something. Sellers give these so buyers can make contact — and yes, the email address is the same one you sign in with. See the next section: this is the part worth understanding properly.

Where you are, roughly. A suburb or postcode you type, or a coarse guess from your connection, so we can show you what's nearby. If you tap “use my location”, your browser asks first and we round the result to about a kilometre before storing it. It lives in a cookie on your device, not on your account.

What you post. Listing text, photos, prices, and the saved searches you ask us to watch.

Ordinary server logs. IP address, browser, and which pages were requested — used to keep the site working and to stop abuse.

We don't run advertising trackers, we don't sell data, and there is no third-party analytics on the site.

When you list an item, three things are shown to buyers who are signed in and who ask to see them: your name, your phone number, and your email address. Not to anonymous visitors, not to search engines, and not on the public page — but to any signed-in buyer who taps the button, all three together.

The email address is worth saying out loud, because it is the address you sign in with rather than a separate one you chose to publish. If you would rather buyers didn't have it, the honest answer is that this site can't offer that yet: contact goes out as a set. Use an address you're content to hand to a stranger, or set up a free one for selling.

But “signed in” only means someone had a working email address and typed a code we sent to it. That proves the address reaches them and nothing else — it is not a background check, and it is not identity verification. Treat your listing as a small classified ad: real, findable, and out there. If you'd rather not publish a mobile number, use one you're comfortable giving out.

Taking a listing down removes your details from it immediately. You can do that yourself from your dashboard at any time, and it's free.

Only the services that make the site work:

• Stripe — processes fee payments. They get what they need to take the payment. We never see your card number.
• Our email provider — sends verification codes, sign-in links and match alerts, so it handles your email address.
• Our hosting provider — runs the servers the site and database sit on.
• Anthropic — if you use the optional “fill it in for me” button, the listing text and photos you chose are sent to their API to draft the listing. Nothing else about you goes with it, and the feature is optional; every field can be typed by hand.

Some of these operate overseas, so your information may be stored or processed outside Australia. We otherwise disclose personal information only where the law requires it.

Two, both necessary. One keeps you signed in. One remembers the location you chose so the site can show you nearby listings. Neither is used for advertising or shared with anyone.

Account details for as long as you have an account. Listings stay after they're sold or taken down so the sale history makes sense, but a withdrawn listing is off the public site. Payment records are kept for as long as tax and accounting law requires — currently five years. Server logs are kept for a short period and then discarded.

Sign-in links and codes are single-use and stored only as a hash — a link expires in 20 minutes, a code in 10, and using either one cancels the other. A code is dead after 5 wrong guesses, which is what stops six digits being worked through by a script. Sessions are signed and can be revoked from your dashboard. Payments go through Stripe, so card numbers never touch our servers.

No system is perfectly secure. If a breach happens that is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

You can ask to see the personal information we hold about you, to have it corrected, or to have your account and its data deleted. Email jjessop@gmail.com and we'll respond within 30 days.

Deleting an account removes your listings and contact details. Records we're legally required to keep — chiefly payment records — stay for as long as the law says, and no longer.

Tell us first, at jjessop@gmail.com. If you're not satisfied with how we handle it, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

See also our terms of use.