Privacy Policy

This Privacy Policy explains how MarshMinder (“MarshMinder,” “we,” “us”) handles information when you use this website and its marketplace. Questions or requests? Contact us at supportmarshminder@gmail.com.

Information we collect

• Account information. When you sign up, we collect your email address and a display name. If you sign in with Google, we receive your name, email, and profile picture from Google. Passwords are handled by our authentication provider and are never stored by us in readable form.
• Profile and content. Your profile (name, optional avatar), any marketplace listings and photos you post, direct messages you send to other users, and reviews you write.
• Payment information. If you purchase a featured listing, payment is processed by Stripe. We receive confirmation and limited details (such as amount and status) but never receive or store your full card number.
• Automatically collected data. Standard server logs (such as IP address and browser type), and data used to secure the site — including IP-based rate limiting and a bot-protection challenge (Cloudflare Turnstile). A session cookie is set to keep you signed in.
• Approximate location. So the Migration Center opens on an area near you rather than a default one, our host tells us the approximate region your request came from, derived from your IP address. We use it to sort areas by distance and then discard it — it is not stored, not written to the address bar, and never linked to your account. It is only ever a rough guess, so you can change the area at any time with the picker.
• Map usage. Our interactive map loads tiles from OpenStreetMap; when it loads, your IP address and the areas you view are sent to OpenStreetMap and are subject to their own privacy policy.

How we use information

• To create and operate your account and profile.
• To run the marketplace — publish listings, deliver messages, and show reviews.
• To process featured-listing payments.
• To send transactional email (such as account confirmation and password reset).
• To secure, maintain, debug, and improve the Service, and to prevent abuse.
• To comply with law and enforce our Terms.

How information is shared

We do not sell your personal information. Marketplace content you choose to post (listings, your display name, reviews) is visible to other users by design. We share personal information only with service providers that process data on our behalf to run the site:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing for featured listings.
• Google — optional sign-in (OAuth).
• Cloudflare — bot-protection challenge on auth forms.
• Resend — delivery of transactional email.
• Vercel — website hosting and delivery.
• OpenStreetMap — map tile imagery.

We may also disclose information if required by law or to protect our rights, users, or the public.

Cookies

We use essential cookies to keep you signed in and to secure the site. We also set one preference cookie, mm_area, which remembers the last public area you chose on the Migration Center so a return visit opens where you left off. It holds our own identifier for that area and nothing about you, and clearing your cookies removes it. We do not use advertising cookies and we do not track you across other websites.

Data retention

We keep your account and content while your account is active. When you delete content or ask us to delete your account, we remove or de-identify your personal information, except where we must retain it to comply with law, resolve disputes, or enforce our agreements.

Your choices and rights

You may access, correct, or delete your information — including requesting deletion of your account — by emailing supportmarshminder@gmail.com. Depending on where you live (for example, California or the EU/UK), you may have additional rights over your personal information, including the right to access, delete, or restrict its use.

Children’s privacy

The Service is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from anyone under 18.

Security

We use reasonable technical and organizational measures — including database-level access controls — to protect your information, but no method of transmission or storage is completely secure.

Changes to this policy

We may update this policy from time to time. The date at the top reflects the most recent revision.