Privacy Policy
Last updated 15 October 2026
This explains what Stocked stores about you, why, and what you can do about it. We keep it to what the marketplace needs.
What we collect
- Account: your email address, username and password. Passwords are handled by our authentication provider and stored hashed — we never see them.
- Phone number: the mobile number you verify by text message when you sign up.
- Profile, if you add it: area, bio, profile photo and banner.
- Listings: titles, descriptions, prices, photos, the country the item is in, and whether pickup is available.
- Messages you send to other members and to Stocked Support through the site, and the giveaways you join.
- Your phone, in the app: a notification token, so we can tell you about new messages.
- Visits: the pages opened, the kind of device, the site you came from, and the country your connection is in. Each browser gets a random id; no name, email or IP address is kept with a visit.
- Security records: a sign-in session cookie, and the email address and IP address used when a verification code or contact message is requested, so we can limit abuse.
Your theme, currency choice and recently viewed listings are saved only in your own browser and are not sent to us. On your first visit, the country your connection is in picks the currency prices are shown in.
What other members can see
Your username, profile photo, banner, bio, area and listings are public. Your verified phone number is shown as a WhatsApp button on your listings and profile only if you turn it on in Settings. Your email address is never shown to other members, and neither is your phone number unless you turn WhatsApp on.
How we use it
- To create and secure your account, including texting and emailing verification codes.
- To show your listings and profile, and deliver messages between members.
- To notify you on your phone and by email when someone messages you, and to answer you when you contact us.
- To run giveaways and contact their winners.
- To prevent spam and abuse, for example by limiting how often codes can be requested.
We do not sell your information, and the site has no advertising trackers.
Who processes it for us
- Supabase — database, sign-in and photo storage.
- Vercel — hosting the website.
- Resend — sending emails.
- Twilio — texting verification codes.
- Google Firebase — delivering notifications to the app.
How long we keep it
Account, profile, listing and message data are kept for as long as your account exists. Security records for verification codes and contact messages are deleted after about a day.
Your choices
- Edit or remove your profile details, photo and banner, and turn WhatsApp on or off, at any time.
- Turn message emails off in Settings, and notifications off in your phone's settings.
- Delete a listing whenever you like.
- Delete your account from Settings. This permanently removes your profile, listings, photos and conversations.
Security
Access to data is restricted at the database level, so members can only change their own profile, listings and messages. No system is perfectly secure, so please use a strong, unique password.
Changes
If this policy changes, we will update the date at the top of this page.
Contact
Questions about your data? Contact us.