Privacy Policy

We collect only what's needed to run the marketplace:

• Account data — email, username, avatar, and authentication identifiers from Firebase Auth.
• Listing & deal content — anything you post, plus messages exchanged with buyers/sellers in a deal.
• Wallet & transaction history — your boost-only wallet balance, marketplace sale/fee records, and payout requests tied to your account.
• Payment data — handled directly by PayPal at checkout and for payouts; Siterifty receives transaction confirmations, authorization/capture identifiers, and (for payouts) the PayPal email, bank, or Bitcoin address you provide — never your full card number or bank login credentials.
• Device & usage data — session info, rough location (for currency/geo defaults), and push notification subscriptions if you opt in.

To operate your account, process deals and PayPal-held payments, prevent fraud and abuse, send transactional notifications (deal updates, disputes, payouts), and — only if you've opted in — push notifications. We don't use your data to build advertising profiles, and we don't sell it.

We share data with the vendors that make the platform work, and no one else:

• Firebase (Google) — authentication, database, and storage.
• PayPal — payment authorization and holding at checkout, capturing/releasing funds when a deal completes, seller payouts, and Pro subscription billing. PayPal may also independently use transaction data for its own fraud, risk, and compliance screening, under PayPal's own privacy policy.
• Push notification services — only for accounts that enable push notifications.

We may also disclose data if legally required to, or to investigate fraud, security incidents, or violations of our Terms.

We use a small number of cookies and local-storage entries, grouped by purpose:

• Essential — keeping you signed in, securing your session, and protecting against fraud. These can't be disabled without breaking core functionality.
• Preference — remembering your currency, theme, and similar display settings.
• Payment — cookies set by PayPal's checkout components while you're on a checkout or payout screen, governed by PayPal's own cookie policy, not ours.

We don't use third-party advertising or cross-site tracking cookies, and Siterifty itself doesn't run any ad network on the platform.

We keep account and transaction data for as long as your account is active, and for a reasonable period after — generally to satisfy tax, dispute, and fraud-prevention obligations tied to completed deals. If you delete your account, we remove personal data that isn't needed for those obligations.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update most account data yourself in Settings, or contact us to make a request. We'll respond within the timeframe required by applicable law (e.g. 30 days under GDPR/CCPA).

Siterifty's infrastructure providers (Firebase, PayPal) may process and store data outside your country of residence. Where required, we rely on those providers' own compliance mechanisms (such as EU Standard Contractual Clauses) for cross-border transfers.

Siterifty isn't directed at children, and we don't knowingly collect data from anyone under 16. Buying or selling on Siterifty requires being at least 18, or the age of majority in your jurisdiction. If you believe a child has provided us data, contact us and we'll remove it.

We may update this policy as the platform evolves — including as our payment model changes. Material changes will be reflected here with an updated date.

Questions about this policy, or a data access/deletion request? Reach out at siterifty@gmail.com.