Privacy policy

Effective date: September 16, 2026

Firesale is a small marketplace run by one person. This page explains, in plain English, what information the Firesale website and iOS app collect, why, and who else sees it. If anything here is unclear, email patrick.carolan@gmail.com.

What we collect

Account details. Your email address and a hashed version of your password when you sign up or sign in. We never store your password in plain text.
Shipping address. Buyers give a US shipping address so purchases can be delivered.
Phone number. Sellers list items by text message, so we keep the phone number you text from. Profiles can also include a contact phone.
Listings. The photos, titles, descriptions and prices you post, and the record of what you bought or sold.
Messages. Messages you send to other Firesale users through the site.
Push notification token. If you allow notifications in the iOS app, we store the device token Apple issues so we can send you alerts.
Basic technical data. Server logs with things like your IP address, browser and the pages you requested, kept briefly for security and debugging.

Why we collect it

To run the auctions: show your listings, take a purchase, and tell the seller it sold.
To deliver what you bought and pay the seller.
To send purchase, sold and listing confirmation emails, plus push notifications if you turn them on.
To suggest a title, description and starting price for the photos you send when listing an item.
To keep the site secure and fix problems.

Who else sees it

We use a few outside services to make Firesale work. Each only gets what it needs for its job.

Stripe handles payments. Your card details go straight to Stripe and are never stored on Firesale's servers. We keep only a Stripe customer ID and a reference to your saved payment method.
Twilio sends and receives the text messages in the selling flow, so it sees your phone number and the messages and photos you text.
Anthropic receives the photos you send when listing an item, so its Claude model can suggest listing details. Photos are not used for anything else.
Apple delivers push notifications to the iOS app using your device token.
Fly.io hosts the website, the database and your uploaded photos.

We do not sell your personal information, and we do not share it with advertisers.

How long we keep it

Your account, listings and purchase history stay as long as you have an account. Server logs are kept for a short time and then discarded.

Deleting your account or data

Email patrick.carolan@gmail.com from the address on your account and we will delete your account and the personal information tied to it. Records we are required to keep for tax or payment reasons, such as completed sales, may be retained.

Children

Firesale is not intended for anyone under 18, and we do not knowingly collect information from children.

Changes

If this policy changes, we will update the effective date at the top of this page.

Contact

Questions? Email patrick.carolan@gmail.com.