Privacy Policy
Last Updated: April 8, 2026 · Effective Date: April 8, 2026
YardHop LLC ("YardHop," "we," "us," or "our") is committed to being transparent about how we handle your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and what choices you have. Please read it carefully.
By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.
Table of Contents
- Information We Collect
- How We Use Your Information
- How We Share Your Information
- Third-Party Services We Use
- Cookies, Local Storage, and Tracking Technologies
- Advertising — Current and Future
- Your Address Data and Public Visibility
- Payment and Boost Transaction Data
- Photo Moderation and Image Processing
- Cookie Consent Records
- Data Retention
- Data Security
- Your Privacy Rights
- California Privacy Rights (CCPA / CPRA)
- Children's Privacy
- Changes to This Privacy Policy
- Contact Us
1. Information We Collect
1.1 Information You Provide Directly
Account Registration
- First and last name
- Email address
- Password (hashed; we never store your plaintext password)
- ZIP code / city (for localization)
- Profile photo (optional)
- Authentication provider (email/password, Google, or Apple)
Listing Information (Sellers)
- Sale title and description / seller notes
- Full street address, city, state, and ZIP code
- Sale date(s) and time(s)
- Item names, categories, conditions, and prices
- Photos (up to 5 per listing)
- Accepted payment methods
Payment and Boost Information
- Stripe payment session ID (we do not receive or store full card numbers, CVV, or bank details — Stripe processes these directly)
- Transaction amount and date
- Boosted listing ID and city
- Payer email address (as returned by Stripe)
Saved Preferences and Interactions
- Sales you save (via our saved-sales feature)
- Searches you save
- Notification preferences (per-type opt-in/out)
- Cookie consent choices (see Section 10)
- Reports you submit about other listings
Communications
- Emails you send us (support, legal, privacy requests)
- Survey or feedback responses
1.2 Information Collected Automatically
When you use the Platform, we automatically collect:
- Device and browser info: device type, operating system, browser name and version, screen resolution, language settings
- Network info: IP address, approximate geographic location derived from IP (city/state level), ISP
- Usage data: pages viewed, listings clicked and saved, search queries, time on page, click paths, referring URL, exit URL
- Log data: server access logs, error logs, timestamps
- Geolocation: precise device GPS coordinates, only if you explicitly grant browser location permission for "Near Me" features
1.3 Information from Third Parties
- Google / Apple Sign-In: name, email address, and profile photo shared by those providers when you use social login
- Stripe webhooks: payment completion status, payer email, transaction metadata
- Analytics providers: aggregated usage metrics about Platform traffic
- Photo moderation services: content flags returned after analyzing uploaded photos (see Section 9)
2. How We Use Your Information
2.1 To Operate the Platform
- Create and manage your account and authenticate your sessions
- Display, filter, and search Sale listings
- Process Boost purchases and activate Boost placement
- Enable the save-a-sale and saved-search features
- Power address autocomplete and map functionality
- Moderate uploaded photos for policy-violating content
2.2 To Communicate With You
- Send transactional emails: account verification, password reset, listing confirmation, Boost receipt, listing expiration notices
- Send notification emails: new Sales near you, reminders for saved sales (only if you opt in)
- Respond to your support requests and inquiries
- Send legal or policy-change notices required by these Terms
2.3 To Personalize Your Experience
- Show listings relevant to your location and past searches
- Remember your search preferences
- Pre-fill your city in listing creation based on your registration ZIP
2.4 To Analyze and Improve
- Understand how users discover and interact with listings
- Identify and fix bugs, performance issues, and usability problems
- Test new features and product improvements
- Generate aggregated, anonymized insights about Platform usage
2.5 For Safety, Security, and Legal Compliance
- Detect, investigate, and prevent fraud, spam, abuse, and Terms violations
- Enforce our Terms of Service and Community Guidelines
- Comply with applicable laws, regulations, and lawful government requests
- Maintain records required for legal and tax compliance
- Protect the rights, property, and safety of YardHop, our users, and the public
2.6 For Advertising
- Display third-party advertisements on the Platform (current and future)
- Measure the effectiveness of advertisements
- Provide aggregated, anonymized demographic and interest data to advertising partners (no personally identifiable information is sold)
- Display Boosted listings in elevated positions as a paid placement product
3. How We Share Your Information
We do not sell your personal information to third parties for their own marketing purposes. We may share your information in the following circumstances:
3.1 Information Displayed Publicly on the Platform
When you post a listing, the following is visible to other Platform users:
- Your first name
- Your sale title, description, dates, photos, item categories, and seller notes
- Your city and state (always visible)
- Your street address and ZIP code — visible only to registered, logged-in users (not to the public or search engines)
Sellers should understand that their street address will be accessible to any registered YardHop user. This is necessary for Buyers to attend the Sale. Do not list a Sale if you are not comfortable with this.
3.2 Service Providers
We share information with vetted third-party service providers who act on our behalf and are contractually prohibited from using your data for any purpose other than providing services to us. These include:
- Supabase — cloud database, authentication, and file storage (photos)
- Stripe — payment processing for Boost purchases
- Sightengine — AI photo content moderation
- Email delivery provider — transactional and notification emails
- Analytics provider(s) — aggregated usage analytics
- Map and geocoding services — address search and map display
3.3 Advertising Partners
We partner with third-party advertising networks to display ads on the Platform. These partners may collect information about your visits to the Platform and other websites using cookies and tracking pixels to serve targeted advertisements. See Sections 5 and 6 for details. We do not share your name or email address with advertisers.
3.4 Legal Disclosure
We may disclose your information when we believe in good faith that disclosure is necessary to: comply with applicable law or legal process; respond to valid government or law enforcement requests; protect the rights, property, or safety of YardHop, our users, or the public; or enforce our Terms.
3.5 Business Transfers
If YardHop is involved in a merger, acquisition, financing, bankruptcy, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your information becomes subject to a different privacy policy.
3.6 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
3.7 Aggregated and De-Identified Data
We may share aggregated or de-identified information that cannot reasonably identify you (e.g., "Sales in Philadelphia increased 40% year-over-year") with partners, advertisers, investors, or the public.
4. Third-Party Services We Use
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Supabase | Database, auth, file storage | supabase.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Google (Maps / Sign-In) | Maps, address autocomplete, social login | policies.google.com/privacy |
| Apple (Sign-In) | Social login | apple.com/legal/privacy |
| Sightengine | Photo content moderation | sightengine.com/privacy |
YardHop is not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
5. Cookies, Local Storage, and Tracking Technologies
5.1 Cookies
| Type | Purpose | Required? | Duration |
|---|---|---|---|
| Essential | Authentication sessions, security tokens, CSRF protection | Yes — cannot be disabled | Session to 1 year |
| Functional | Remembering your preferences (location, notification settings) | Optional | Up to 1 year |
| Analytics | Understanding how users navigate the Platform; improving features | Optional | Up to 2 years |
| Advertising | Serving and measuring targeted advertisements from third-party networks | Optional | Varies by partner |
5.2 Browser Local Storage
We store certain data in your browser's local storage (not cookies) for performance and offline functionality. This includes:
- Listings you have created (cached locally until synced to our servers)
- Sales you have saved
- Your cookie consent preferences
- UI preferences (e.g., last search location)
Local storage data stays on your device and is not automatically transmitted to us. You can clear it at any time through your browser settings.
5.3 Other Tracking Technologies
We and our partners may use:
- Pixel tags / web beacons: small image files that help us measure ad effectiveness and page visits
- Device fingerprinting: for fraud detection and preventing duplicate accounts
5.4 Managing Your Choices
When you first visit the Platform, you will be presented with a cookie consent banner where you can accept all cookies, accept only essential cookies, or customize your preferences for analytics and advertising cookies. You can change your preferences at any time through your account settings.
Additional opt-out resources:
- Google Analytics Opt-Out Browser Add-on
- Digital Advertising Alliance (DAA) Opt-Out
- Network Advertising Initiative (NAI) Opt-Out
- Google Ad Settings
6. Advertising — Current and Future
6.1 Current Advertising
We currently offer paid Boost placements, where Sellers can pay to have their listing appear at the top of search results. This is a first-party advertising product — no personal data is shared with other parties to serve these placements.
6.2 Future Third-Party Advertising
We intend to introduce third-party display advertising on the Platform, potentially including Google AdSense, programmatic advertising exchanges, Meta Audience Network, and similar networks. When we do so:
- Ad partners may collect your browsing data on the Platform using cookies and pixels
- Ads may be personalized based on your interests and browsing history across the web
- We will update this Privacy Policy before activating any new advertising network
- You will be able to opt out of personalized advertising through the cookie consent settings
6.3 Sponsored Listings
We may in the future offer sponsored listing placements to local businesses (e.g., junk removal, estate sale companies, moving services). These will always be clearly labeled as sponsored. Placement of sponsored content is paid for by the advertiser; YardHop does not endorse the products or services of sponsors.
6.4 What We Do Not Do
We do not and will never:
- Sell your name, email address, or contact information to advertisers
- Share individual-level behavioral data with advertisers
- Allow advertisers to target users based on sensitive categories (health, religion, race, political views)
7. Your Address Data and Public Visibility
7.1 Seller Address Data
When you post a Sale listing, you provide your full street address. Here is how that data is handled:
- City and state: displayed publicly to all visitors, including non-registered users and search engines
- Street address and ZIP code: displayed only to registered, logged-in YardHop users — not to anonymous visitors, not indexed by search engines
- Get Directions link: available only to logged-in users; links to Google Maps using your full address
By posting a listing, you consent to your street address being accessible to all registered YardHop users. Do not list your address if you are not comfortable with registered members seeing it.
7.2 Buyer Location Data
If you grant location permission in your browser for the "Near Me" search feature, we use your GPS coordinates to return nearby listings. We do not store your precise GPS coordinates — only an approximate city/ZIP region is retained for analytics. You may revoke location permission at any time through your browser settings.
8. Payment and Boost Transaction Data
When you purchase a Boost, your payment is processed entirely by Stripe, Inc. YardHop receives the following data from Stripe after a successful transaction:
- Stripe Checkout Session ID (for our records)
- Payment status (paid / failed)
- Amount charged
- Payer email address
- Listing ID and city associated with the Boost
We do not receive, see, or store your card number, expiration date, CVV, or bank account details at any point. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.
Transaction records are retained for seven (7) years for accounting and tax compliance purposes, regardless of whether you delete your account.
9. Photo Moderation and Image Processing
When you upload photos to a listing, those photos are transmitted to Sightengine, a third-party AI content moderation service, for automated analysis. Sightengine checks for policy-violating content including nudity, weapons, violence, and other prohibited material.
- Photos are transmitted securely to Sightengine's servers over HTTPS
- Sightengine processes the image and returns a moderation result (pass/flag) to YardHop
- We do not share your personal account information with Sightengine
- Sightengine's data practices are governed by their privacy policy at sightengine.com/privacy
Photos that pass moderation are stored in Supabase Storage. Photos flagged by the moderation system may be rejected. We fail-open — if the moderation service is unavailable, photos are accepted and may be reviewed manually.
Only upload photos you own or have permission to use. Do not upload photos of other people without their consent, and do not upload photos that reveal sensitive information (e.g., documents, license plates, children's faces).
10. Cookie Consent Records
When you interact with our cookie consent banner, we record your consent decision to maintain a legal audit trail. The consent record includes:
- Your consent choices (which categories you accepted or declined)
- The version of our Privacy Policy in effect at the time of consent
- Timestamp of consent
- Your IP address (for geographic compliance verification)
- Your browser user-agent string
- Your YardHop user ID (if logged in)
This record is stored in our database and retained for three (3) years. It is used solely for legal compliance purposes and is never shared with third parties except as required by law. This processing is carried out under our legitimate interest in demonstrating regulatory compliance.
11. Data Retention
| Data Type | Retention Period |
|---|---|
| Active user accounts | Until you delete your account or we terminate it |
| Inactive accounts (no login for 12+ months) | Deleted after 12 months of inactivity, with 30 days' notice |
| Active listings | Displayed until sale end date; retained for 90 days after expiration |
| Expired or cancelled listings | Removed from public view immediately; deleted from our servers after 90 days |
| Listing photos | Deleted 90 days after listing expiration or cancellation |
| Transaction records (Boost purchases) | 7 years (legal and tax compliance) |
| Cookie consent records | 3 years |
| Support communications | 3 years |
| Server and access logs | 90 days |
| Aggregated / anonymized analytics | Indefinitely (no personal data) |
11.1 Account Deletion
When you delete your account:
- Your listings are immediately removed from public view
- Your profile information (name, email, photo) is deleted within 30 days
- Your saved sales and searches are deleted within 30 days
- Transaction records are retained for 7 years as required by law
- Cookie consent records are retained for 3 years
- Aggregated / anonymized data derived from your activity may be retained indefinitely
- Backups may retain your data for up to 90 additional days after deletion
12. Data Security
We take data security seriously and implement industry-standard measures, including:
- Encryption in transit: all data transmitted between your browser and our servers uses TLS/HTTPS encryption
- Encryption at rest: sensitive database fields are encrypted at rest
- Password security: passwords are hashed using bcrypt; we never store plaintext passwords
- Access controls: database Row Level Security (RLS) ensures users can only access their own data
- Payment security: payment processing is fully delegated to Stripe; we do not handle card data
- Photo storage: photos are stored in access-controlled cloud storage with private bucket policies
- Regular assessments: we review and update our security practices as the Platform grows
Despite these measures, no system is 100% secure. In the event of a data breach that materially affects your personal information, we will notify you as required by applicable law and will take steps to mitigate the harm.
You are responsible for maintaining the confidentiality of your account credentials. Do not share your password. Notify us immediately at security@yardhop.net if you suspect unauthorized access.
13. Your Privacy Rights
13.1 Access and Portability
You may request a copy of the personal information we hold about you. We will provide it in a commonly used, machine-readable format within 30 days of receiving your request.
13.2 Correction
You may update or correct your account information at any time through your account settings. For information you cannot update yourself, contact us at privacy@yardhop.net.
13.3 Deletion
You may delete your account through your account settings. See Section 11.1 for what happens to your data. Note that we may retain certain data as required by law.
13.4 Opt-Out of Marketing Emails
You may unsubscribe from non-essential emails at any time by clicking "unsubscribe" in any email or by adjusting your notification preferences in account settings. Transactional emails (account verification, payment receipts, listing expiration notices) cannot be opted out of while your account is active.
13.5 Withdraw Cookie Consent
You may change your cookie preferences at any time through your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
13.6 Objection to Processing
Where we process your data based on our legitimate interests, you may object to that processing. We will evaluate your objection and either cease processing or explain our compelling legitimate grounds.
To exercise any of these rights, email privacy@yardhop.net. We respond within 30 days.
14. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
14.1 Categories of Personal Information We Collect
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, IP address, device identifier | Yes |
| Personal Information (§ 1798.80) | Name, address, payment-related info | Yes |
| Protected Classifications | Age (18+) | Yes |
| Commercial Information | Transactions, listings created, Boost purchases | Yes |
| Internet / Network Activity | Pages viewed, search queries, links clicked | Yes |
| Geolocation | IP-based approximate location; GPS if granted | Yes |
| Visual / Sensory Data | Photos uploaded to listings | Yes |
| Inferences | Inferred preferences from usage patterns | Yes |
14.2 Your California Rights
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom it is shared
- Right to Delete: request deletion of your personal information, subject to certain exceptions (legal obligations, fraud prevention, etc.)
- Right to Correct: request correction of inaccurate personal information
- Right to Opt-Out of Sale/Sharing: we do not sell personal information; you may opt out of sharing for cross-context behavioral advertising by adjusting your cookie settings
- Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information (as defined by CPRA) beyond what is necessary to provide the Platform
- Right to Non-Discrimination: we will not discriminate against you for exercising any CCPA/CPRA rights
To exercise your California rights, email privacy@yardhop.net with subject "CCPA Request." We will respond within 45 days (extendable by an additional 45 days with notice).
15. Children's Privacy
The Platform is intended solely for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@yardhop.net and we will promptly delete that information. We comply with the Children's Online Privacy Protection Act (COPPA).
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the updated policy on the Platform
- For significant changes: send an email notification to registered users and, where applicable, require renewed consent
Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy. If you disagree with any changes, you should stop using the Platform and delete your account.
17. Contact Us
For any privacy questions, requests, or concerns:
YardHop LLC — Privacy
Email: privacy@yardhop.net
CCPA Requests: privacy@yardhop.net — Subject: "CCPA Request"
General Legal: legal@yardhop.net
Security: security@yardhop.net
We aim to respond to all privacy inquiries within 30 days.
Quick Reference Summary
| Topic | Summary |
|---|---|
| What we collect | Account info, listing info (including address), usage data, payment metadata, device info |
| Why we collect it | Operate the Platform, process payments, personalize your experience, ensure safety, serve ads |
| Who we share with | Supabase, Stripe, Sightengine, analytics providers, future ad networks — never sold to third parties |
| Seller address | Street address visible to all registered logged-in users; city/state visible to everyone |
| Boost payment data | Stripe handles card data; we receive only transaction metadata |
| Photos | AI-moderated by Sightengine; stored on Supabase; deleted 90 days after listing expires |
| Advertising | Current: Boosted listings. Future: third-party display ads. We never sell personal data to advertisers. |
| Your rights | Access, correct, delete, opt out of marketing, manage cookie preferences |
| California | Full CCPA / CPRA rights — email privacy@yardhop.net |
| Children | 18+ only; COPPA compliant |
| Contact | privacy@yardhop.net |
By using YardHop, you acknowledge that you have read and understood this Privacy Policy.
Also see our Terms of Service · Help Center