Privacy Policy

How Cariboo collects, uses and protects your information. This is a placeholder pending review by a qualified lawyer.

What we collect

• Account details: email, display name, country, region and city.
• Phone number, if you choose to provide it.
• Content you create: listings, photos, messages and ratings.

Why we collect it

• To authenticate you and keep your account secure.
• To let buyers and sellers contact each other about listings.
• To prevent fraud, abuse and prohibited activity.

How long we keep it

We keep your data until you delete your account. After deletion we may retain anonymized logs for up to 12 months for security and legal purposes.

Sharing

We do not sell your personal data. Payments in the MVP are cash and handled offline, so no payment data is stored. Our cloud hosting provider processes data on our behalf under contract.

Cookies

We use a small number of cookies:

• A session cookie to keep you signed in (httpOnly).
• A CSRF cookie for double-submit protection on forms.

We do not use analytics or advertising cookies yet.

Your rights

You may request access to, correction of, export of, or deletion of your personal data. Contact us to make a request.

Security

Passwords are hashed with Argon2id. In production we serve the site over HTTPS, and session cookies are marked httpOnly and secure.

Changes to this policy

We may update this policy from time to time. Updated versions will be posted on this page.

Contact

Privacy questions or requests? Visit our contact page.