Privacy Policy — Adopt A Hobby

1. Introduction

Adopt A Hobby (“we”, “our”, “us”) operates a peer-to-peer hobby gear exchange platform. This Privacy Policy explains what personal data we collect, why we collect it, and how we use and protect it. By using our platform you agree to the practices described here.

2. Data We Collect

2.1 Account & Authentication Data

When you create an account we collect your email address and, where provided, your display name and profile photo. Authentication is handled via Supabase Auth which stores credentials securely using industry-standard hashing. We do not store raw passwords.

2.2 Item Listings

When you list a hobby item you provide a title, description, condition, estimated value, category, and one or more photographs. This content is stored in our Supabase (PostgreSQL) database and associated Supabase Storage bucket. Item listings are visible to other registered users.

2.3 Exchange Activity

We record exchange offers, acceptances, rejections, and completed swaps. This history is used to build your reputation score and resolve disputes. Exchange records are retained for a minimum of 24 months to support dispute resolution.

2.4 Analytics (PostHog)

We use PostHog to understand how users interact with the platform. PostHog may collect anonymised usage events (page views, button clicks, feature usage) and, where you respond to optional in-app surveys, your survey responses. PostHog data is processed under PostHog's own privacy policy. You may opt out of analytics tracking via the cookie banner or by emailing us.

2.5 Cookies & Local Storage

We use strictly necessary cookies to maintain your authenticated session (via Supabase Auth). We also use analytics cookies set by PostHog, which require your consent. You can manage cookie preferences through your browser settings or our cookie banner. We do not use cookies for advertising.

3. How We Use Your Data

To operate and improve the exchange platform
To match you with relevant swap opportunities
To display your public profile and reputation to other users
To send transactional emails (exchange offers, confirmations, account actions)
To investigate disputes and enforce our Terms of Service
To analyse aggregate, anonymised usage patterns and improve the product
To comply with applicable laws and regulations

We do not sell your personal data to third parties. We do not use your data to build advertising profiles.

4. Data Sharing

We share data only with the sub-processors necessary to operate the service:

Supabase — database and file storage (your data remains within the Supabase region you were assigned)
Vercel — hosting and edge delivery
PostHog — product analytics (anonymised events only)

We may disclose your information if required by law, court order, or to protect the safety of our users.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is anonymised or deleted within 30 days, except where we are required by law to retain records (e.g. exchange history for dispute resolution, retained for 24 months). Anonymised, aggregate analytics data may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access a copy of the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data (“right to be forgotten”)
Object to or restrict certain processing activities
Port your data to another service (data portability)
Withdraw consent for analytics at any time

To exercise any of these rights, email us at privacy@adoptahobby.com. We will respond within 30 days.

7. Security

We use industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and row-level security (RLS) policies in our database so that users can only access their own private data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable measures to protect your information.

8. Children's Privacy

Adopt A Hobby is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy with an updated date and, where required, by email. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.

10. Contact

If you have questions about this policy, contact us at privacy@adoptahobby.com.