What we keep, and who can see it

The short version

We collect what the shop needs to rent you a shelf and to show your goods: your name and email, an optional phone number, what you list, the photographs you send of it, and the sign-in cookies that keep you signed in. A shopper never sees your name or your contact details — only that a shelf is taken. We do not sell your information, we do not run advertising, and this site loads no third-party analytics or tracking.

What we collect

• Your account: the name that appears on your shelf, your email address, and a phone number if you choose to give one. If you rent a shelf, the unit, the rent and the date your rental started.
• What you do here: the items you list or offer, the photographs you send, and the messages we send you about them, with a record of whether they were delivered.
• Signing in: two cookies of our own (le_sess for a staff or owner account, le_vsess for a seller's account). They carry a signed session id and nothing else. They last 30 days if you tick "keep me signed in", otherwise until you close the browser.
• Keeping the site safe: the IP address you sign in from and when, used to throttle repeated attempts and to record sign-in failures. We keep these for a limited period for security and then they stop being used.
• Your password, if you set one: stored only as a salted one-way hash. Nobody at the shop can read it, including us.

What shoppers can see

• Public: the item, its price, its photograph, and the label printed on the shelf.
• Not public: your name, your email, your phone number, what you pay in rent, and how much you have sold. A shelf page says "Rented" to the world; it names the seller only to the seller and to shop staff.

Cookies

Only the two sign-in cookies described above. There is no advertising cookie, no analytics and no social plugin. Our content delivery network may rewrite an email address on a page so that address harvesters cannot read it, and serves its own small script from our own domain to undo that for a real browser — that is the only script these pages load.

Who else is involved

• Our photographs and pages are delivered through a content delivery network (Cloudflare), which caches them so they load quickly. A cached photograph stays cached until we clear it.
• Email to you is sent through the shop's own mail server, and our mail records show what was delivered and when.
• We do not sell, rent or trade personal information, and we do not share it with anyone else except where the law requires it.

How long we keep it

• While you rent a shelf, and afterwards for as long as we must keep the rent ledger and the tax records that go with it.
• A photograph removed from a listing is archived out of public view rather than destroyed — that is the shop's standing promise to sellers. It is not served to shoppers once it is removed.
• If you ask us to close your account we will remove your details from the site and from your shelf; the records we are obliged to keep (rent, tax) stay in the ledger.

Your choices

You can see and change your contact details on your own account page. To correct something, to take a photograph or listing down, or to close an account, ask at the counter or email [email protected] and we will do it. If you think we are holding something we should not, tell us and we will fix it or explain why we must keep it.

Children

This site is meant for adults doing business with a shop. It is not intended for anyone under 13, and we do not knowingly collect their information.

Changes

If this policy changes, the version on this page is the current one, with the date at the top. Questions about any of this: [email protected].