Privacy

• Email and passwordTo create and secure your account. Passwords are hashed — we never see them.
• Username and date of birthYour public handle, and to confirm you are 13 or over. Your date of birth is never shown publicly.
• Listing details and photosTo show your items. Photos are resized in your browser and stripped of EXIF data — including GPS location — before they ever leave your device.
• Swipes (save / pass)To avoid showing you the same item twice.
• Offers and messagesTo let you negotiate and talk to the other party.
• Orders and delivery addressTo take payment and post the parcel. Your delivery address is entered in the app to quote shipping before you pay, then passed to the carrier to print a label.
• Return address (sellers)To print your postage label. Only used for that — never shown to buyers.
• Ratings and reviewsPublic feedback after a completed order.
• Reports and blocksSafety and moderation.

Card numbers.Payment details are entered on Stripe's own checkout page and never touch Wornly's servers. We only ever receive a reference to the payment.

We do not sell your data, and we do not run advertising trackers.

• SupabaseDatabase, login, and image storage.
• StripePayments, payouts, and seller identity checks.
• ShippoBuying postage labels and tracking parcels.
• ResendTransactional email, such as an order confirmation.
• VercelHosting.

Right now the Discover feed simply shows the newest available listings. There is no profiling, personalisation, or automated decision-making about you. If that changes, this page and the disclaimer on the feed itself will say so.

Messages are end-to-end encrypted once both people have set up encryption. After you set up your encryption keys (you'll be asked to save a recovery phrase the first time you open a chat), messages between you and someone who has also set theirs up are encrypted on your device and cannot be read by us. Until then — including a first message sent before setup, and any messages from before this feature existed — chat is stored in our database in readable form, so please don't share anything sensitive there.

Listing photos are not yet scanned automatically. Images go live immediately. We rely on user reports to catch anything that breaks the rules.

You can edit your profile and remove your listings at any time. To request a copy of your data or have your account deleted, contact us. Where we must keep records for tax and accounting, we anonymise your personal details and retain only the transaction record.