We collect information you provide directly:

• Account details: name, email, and password (hashed).
• Profile preferences: taste quiz answers, preferred sizes, collection items.
• Listing and transaction data: photos, descriptions, bids, offers, shipping addresses.
• Communications: messages between buyers and sellers, support requests.

We also collect usage data automatically: pages viewed, device type, and approximate location (city-level) for analytics and fraud prevention.

We use your data to:

• Process transactions, route seller payouts, and coordinate shipping.
• Personalize your feed and surface relevant listings and alerts.
• Communicate about your orders, disputes, and account security.
• Detect fraud, counterfeits, and policy violations.
• Improve our AI valuation and authenticity models.

Payment information is handled entirely by Stripe. We never store your full card number or banking details on our servers. Stripe's PCI-compliant infrastructure processes all transactions. We retain only transaction metadata (amounts, dates, status) for record-keeping and dispute resolution.

We do not sell your personal data to third parties. We do not share your email with sellers or buyers beyond what's necessary to complete a transaction. Your real name is never displayed publicly unless you choose to add it to your profile.

We share data only when necessary:

• With Stripe to process payments and payouts.
• With shipping carriers to generate labels and track packages.
• With authorities when legally required to comply with law enforcement.
• With service providers who help us run the platform (analytics, email delivery), under strict data agreements.

We retain account data for as long as your account is active. Transaction records are kept for 7 years for tax and legal compliance. You may request deletion of your account and personal data at any time; some records may be retained to meet legal obligations.

We use essential cookies for authentication and session management. Analytics cookies help us understand how the platform is used. You can disable non-essential cookies in your browser settings without losing core functionality.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your data.
• Export your data in a portable format.
• Opt out of marketing communications.

We use encryption in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel. Despite our efforts, no system is perfectly secure — we will notify affected users of any data breach as required by law.

Faded Cotton is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.

We may update this Privacy Policy as our practices evolve. We will notify you of significant changes in-app or by email.