Privacy

• Email and passwordTo create and secure your account. Passwords are hashed — we never see them.
• Username and date of birthYour public handle, and to confirm you are 13 or over. Your date of birth is never shown publicly.
• Listing details and photosTo show your items. Photos are resized in your browser and stripped of EXIF data — including GPS location — before they ever leave your device.
• Swipes (save / pass)To avoid showing you the same item twice.
• Offers and messagesTo let you negotiate and talk to the other party.
• Orders and delivery addressTo take payment and post the parcel. Your delivery address is entered in the app to quote shipping before you pay, then passed to the carrier to print a label.
• Return address (sellers)To print your postage label. Only used for that — never shown to buyers.
• Ratings and reviewsPublic feedback after a completed order.
• Reports and blocksSafety and moderation.

Card numbers. Payment details are entered on Stripe's own checkout page and never touch Wornly's servers. We only ever receive a reference to the payment.

We do not sell your data, and we do not run advertising trackers.

• SupabaseDatabase, login, and image storage.
• StripePayments, payouts, and seller identity checks.
• ShippoBuying postage labels and tracking parcels.
• ResendTransactional email, such as an order confirmation.
• VercelHosting.

The Discover feed shows the newest available listings, with two things removed: items you have already swiped past, and items from anyone you have blocked. That is the only way your own activity affects what you see.

We do not build a profile of your taste, rank items by what we think you will like, or make any automated decision about you. If that changes, this page and the note on the feed itself will say so.

Messages are end-to-end encrypted once both people have set up encryption. After you set up your encryption keys (you'll be asked to save a recovery phrase the first time you open a chat), messages between you and someone who has also set theirs up are encrypted on your device and cannot be read by us. Until then — including a first message sent before setup, and any messages from before this feature existed — chat is stored in our database in readable form, so please don't share anything sensitive there.

Listing photos are not yet scanned automatically. Images go live immediately. We rely on user reports to catch anything that breaks the rules.

You can edit your profile and remove your listings at any time. You can delete your account yourself from the bottom of your profile — it erases your personal details and takes your listings down. Where we must keep records for tax and accounting, we anonymise your personal details and retain only the transaction record.

To request a copy of your data, a correction, or anything else covered by privacy law, use the address on our Contact page, which also names the business that operates Wornly.