Your information,
handled with care.

1 Scope and who we are

This Privacy Policy describes how Faded Forward (“Faded Forward,” “we,” “us,” or “our”) handles personal information when you use our websites, accounts, marketplace, communications, checkout, shipping, donation, and support features (the “Services”).

It applies whether you browse as a guest or use an account as a buyer, seller, or donor. It does not control an independent seller’s, charity’s, carrier’s, payment provider’s, or linked website’s separate privacy practices.

When you use the Services, Faded Forward determines why and how marketplace information is processed, except where another organization identifies itself as independently responsible. Our Terms of Service govern use of the Services.

2 Information we collect

The information we collect depends on how you use Faded Forward.

Some information may be considered sensitive under certain laws, such as account credentials, payment-related information, identity-verification information, or a shipping address. We use sensitive information only for permitted purposes such as providing requested services, security, payment processing, fraud prevention, and legal compliance.

3 Where information comes from

• From you when you register, list an item, complete checkout, configure a seller account, arrange shipping, donate, communicate, or contact support.
• Automatically through essential cookies, local browser storage, server logs, and interactions with pages and marketplace features.
• From other members when they transact or communicate with you, leave a review, or submit a report or dispute involving you.
• From service providers such as Supabase, Stripe, EasyPost, carriers, hosting providers, and fraud or identity-verification services.
• From public or lawful sources when reasonably needed to verify a seller, investigate fraud, protect safety, or comply with law.

4 How we use information

We use personal information to:

• create, authenticate, maintain, and personalize accounts;
• publish listings and operate search, carts, wishlists, offers, and recommendations;
• process orders, payments, seller onboarding, payouts, refunds, and disputes;
• verify addresses, calculate shipping rates, create labels, and track delivery;
• coordinate donations, pickups, drop-offs, receipts, and impact records;
• provide messages, service notices, order updates, and requested support;
• detect, investigate, and prevent fraud, abuse, unsafe activity, and policy violations;
• moderate content and protect members, Faded Forward, and the public;
• debug, measure, maintain, and improve performance and accessibility;
• enforce our Terms, resolve claims, and preserve transaction records; and
• comply with tax, accounting, consumer-protection, sanctions, and other legal duties.

Where applicable law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests such as safety and service improvement, comply with legal obligations, protect vital interests, or based on consent. You may withdraw consent for future processing where consent is the applicable basis.

5 How we disclose information

We may disclose personal information to the following recipients:

• Transaction participants. Buyers and sellers receive information needed to complete an order, communicate, arrange delivery or pickup, and resolve a problem. Public profiles and listings can be viewed by anyone.
• Donation partners. Participating organizations may receive donor, item, pickup, drop-off, delivery, and receipt information needed to accept a donation.
• Service providers. Hosting, database, authentication, storage, payment, payout, carrier, shipping, customer-support, security, communications, and professional-service providers process information for us.
• Legal and safety recipients. We may disclose information to courts, regulators, law enforcement, rights holders, insurers, auditors, or others when we reasonably believe it is necessary to comply with law, protect safety or rights, investigate fraud, or establish and defend claims.
• Business transactions. Information may be reviewed or transferred in connection with financing, due diligence, a merger, acquisition, reorganization, bankruptcy, or sale of some or all of our business, subject to appropriate safeguards.
• At your direction. We disclose information when you request or consent to it, such as when you choose a delivery or donation partner.

We may use and disclose aggregated or deidentified information that cannot reasonably be linked to you. We do not attempt to reidentify information maintained as deidentified.

6 Payments and shipping

Stripe processes buyer payments and seller onboarding and payouts. Payment details you enter on Stripe-hosted pages are provided directly to Stripe. Faded Forward receives transaction identifiers, status, amount, limited account details, and information needed to complete the order, handle a refund or chargeback, and reconcile payouts.

EasyPost and selected carriers receive sender, recipient, contact, address, parcel, and shipment information needed to verify addresses, quote rates, purchase labels, schedule pickups, provide tracking, and investigate delivery issues.

Supabase provides authentication, database, and storage infrastructure. Vercel provides application hosting and related request logs. These providers process information under their own terms and privacy notices as well as agreements with us.

7 Cookies and local storage

Supabase authentication cookies keep you signed in, refresh your session, and protect account access. These cookies are required for account features. Server and hosting technologies may also use request data for security, routing, reliability, and abuse prevention.

For signed-out visitors, local storage keeps guest cart entries, favorite item IDs, and an unpublished selling draft on that browser. This lets those choices persist between visits. Signing in may synchronize eligible guest information to your account and remove the local copy.

You can clear cookies and local storage through browser settings. Blocking essential cookies may prevent login or other account features. See our Cookie Policy for more detail.

8 Personalization and automated tools

We may use activity such as searches, item views, categories, carts, wishlists, listing quality, availability, and transaction signals to sort results, recommend items, and personalize marketplace experiences.

Automated tools may also identify spam, fraud, payment risk, account compromise, prohibited content, or unusual transaction patterns. These tools may restrict an action or refer it for review. Where required by law, you may request human review of a decision that produces legal or similarly significant effects.

We do not use personal information to make solely automated decisions about employment, credit, housing, insurance, education, or other unrelated eligibility.

9 How long we keep information

We retain personal information for as long as reasonably necessary for the purposes described here. Retention depends on the type of information, whether your account is active, the status of a transaction or dispute, safety and fraud risks, backup cycles, and applicable tax, accounting, payment, consumer-protection, and legal obligations.

Account and profile information is generally kept while your account is active. Transaction, payment, payout, shipping, donation, tax, and dispute records may be kept after account closure where required for recordkeeping, fraud prevention, chargebacks, enforcement, or legal claims. Public content may remain available until deleted or the account is closed, subject to those same exceptions.

Guest cart, favorite, and draft information remains in your browser until it is cleared, synchronized, removed by the Services, or deleted through browser settings. When information is no longer needed, we delete or deidentify it, subject to technical and legal limitations.

10 How we protect information

We use administrative, technical, and organizational safeguards designed to protect personal information. These include authenticated access, row-level database controls, encrypted network connections, restricted server credentials, payment-provider tokenization, signed webhook verification, logging, and access controls based on role and purpose.

No online system can guarantee absolute security. Use a unique password, protect access to your email and devices, do not share authentication links or payment credentials, and report suspected account compromise through the Help Center.

11 Your choices and privacy rights

Depending on where you live, you may have the right to request access to, a copy of, correction of, or deletion of personal information; object to or restrict certain processing; withdraw consent; or appeal a denied request.

You can also make the following choices:

• update available profile and address information through account settings;
• remove items from your cart or wishlist and clear guest browser storage;
• mark notifications as read and manage available communication settings;
• stop promotional communications using the unsubscribe method provided; and
• request account closure or exercise a privacy right through our privacy request form.

Select the privacy or account option when available and describe the right you want to exercise. We may verify your identity and authority before completing a request. We will use verification information only for security, fraud prevention, and handling the request. Certain information may be exempt—for example, records needed to complete a transaction, detect fraud, comply with law, or establish legal claims.

You may use an authorized agent where permitted. We may require proof of authorization and may ask you to confirm the request directly. You will not receive discriminatory treatment for exercising an applicable privacy right.

12 California and U.S. state privacy notices

This section supplements the rest of this Policy for residents of California and other U.S. states with applicable comprehensive privacy laws. The categories below describe our practices during the preceding 12 months.

We collect and use these categories for the purposes described in Sections 4–8. We have not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16.

Subject to applicable law, residents may request to know, access, correct, delete, or obtain a portable copy of personal information and may appeal a denied request. Because we do not sell personal information or share it for cross-context behavioral advertising, there is currently no sale or advertising share to opt out of. We will honor legally required browser-based opt-out preference signals, such as Global Privacy Control, if our practices change in a way that makes such a signal applicable.

We use sensitive personal information only for permitted service, security, payment, shipping, legal, and safety purposes and not to infer characteristics about you. To submit a request, use our privacy request form. If we deny a request, you may reply through the support process to appeal.

13 Children’s privacy

Faded Forward is a general-audience marketplace intended only for people who are at least 18 years old. The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that a child under 13 provided personal information, we will take reasonable steps to delete it. A parent or guardian who believes a child submitted information can contact us through our privacy request form.

14 International data transfers

Faded Forward currently supports U.S. marketplace fulfillment. We and our providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from those where you live.

Where required, we use recognized safeguards for international transfers, such as contractual protections, provider certifications, or another lawful transfer mechanism. You may contact us for more information about safeguards applicable to your information.

15 Changes and contact

We may update this Policy as our Services, providers, or legal obligations change. We will post the revised Policy and update the effective date. If a change materially affects your privacy rights, we will provide additional notice through the Services or available account contact information where required.

For privacy questions, requests, or concerns, use the privacy or account option in our issue-reporting form. Transaction and account-support questions can be submitted through the Help Center.