Privacy
Policy

What We Collect

When you use Havens Resale — browsing, signing in, buying, or selling — we collect the following:

• Your email address, display name, and profile photo (if you sign in with Google or Apple)
• Your IP address on every sign-in and form submission
• Device and browser information (user agent string, screen context)
• Purchase history — what you bought, when, and for how much
• Points balance and transaction history
• Anything you type into sell submissions, chat messages, or contact forms — including item descriptions, photos, and asking prices
• Number of accounts created from your IP address
• Cart contents stored in your browser (localStorage — stays on your device)

If you sign in via Google or Apple, those providers share your name, email, and profile photo with us per their own terms. We receive it; we store it.

Why We Collect It

• To operate the store — process orders, track inventory, handle payouts
• To run the points system — award, track, and redeem balances accurately
• To communicate with you about orders, sell submissions, and support requests
• To detect and block abuse — spam submissions, fake accounts, and fraud
• To understand how the site is used so we can improve it
• To build a contact record when you submit a sell request, so we can follow up

Who Sees It

Internally: Haven and anyone who operates this store's admin panel.

Third-party infrastructure we rely on — each has their own privacy policy:

• Stripe — processes payments. They see your card details and billing info. We see transaction confirmation and amount only.
• Firebase / Google — authentication and database. Your account data and submissions are stored here.
• Vercel — hosts this website. They see request logs including IP addresses.

That's it. No ad networks. No data brokers. No resale. No "partners."

We Do Not Sell Your Data

Not to advertisers. Not to data brokers. Not to anyone. Your information is used to run this store. That's the only reason it exists here.

Cookies & Local Storage

We use browser localStorage to hold your cart between sessions. No tracking cookies. No cross-site cookies. Firebase sets an auth session cookie when you sign in — it's used only to keep you logged in.

Account Deletion & Data Removal

Email havensresale@gmail.com with the subject "Delete My Account" and we'll remove your account and associated data within 14 days. Order records may be retained for 90 days for dispute and fraud purposes, then deleted.

Changes to This Policy

If we change something meaningful, we'll update the date at the top of this page. Continuing to use the site after a change means you're okay with it. If you're not, email us.