Privacy Policy
Last updated: October 5, 2026 (previous version effective September 20, 2026)
1. About This Policy
StillSparkly is operated by Sparkly Empire LLC, a California limited liability company, which is responsible for the personal information described in this policy. In this policy, “StillSparkly,” “we,” and “us” mean Sparkly Empire LLC. This policy explains what information we collect when you use our site and services, what we do with it, who we share it with, and the choices you have. It goes with our Terms of Service. Questions? Email support@stillsparkly.com.
2. Information We Collect
We collect the following, depending on how you use StillSparkly:
- Account and profile: your name, email address, password (stored in scrambled form), username, profile photo, bio, and location if you add one. If you sign in with Google or Apple, we receive the basic profile details they share with us (Apple may let you hide your email address behind a relay address).
- Listings and content: photos, titles, descriptions, prices, reviews, and anything else you post, plus your saved items and searches.
- Messages: messages you send and receive through StillSparkly.
- Orders and shipping: what you buy or sell, your shipping name and address, tracking details, and any return or Buyer Protection case.
- Payments and payouts: Stripe handles your card and bank details, and sellers give Stripe their identity and tax details directly. We don't store full card numbers or bank account details. We keep the order amounts, fees, and payout records and receive limited information about your payment from Stripe.
- Phone number and text messages: if you turn on text-to-list, your mobile number, when you agreed to receive texts, and the photos and messages you text us.
- Device and usage information: your IP address, browser and device type, the pages you view and actions you take, and cookies and similar technologies (see Section 5). Where notifications are turned on, we also store a device notification token.
- Fraud-prevention codes: so we can tell when a new account matches one we already suspended for fraud, we turn a few details into scrambled, one-way codes (salted hashes) as soon as we receive them: the IP address and browser you use when you sign up, sign in for the first time, or check out as a guest, your email domain, and, once you add them, your verified phone number, payout account ID, street address, and an identifier Stripe assigns to the card you pay with (not the card number). For this check we store only the codes, never the originals. We use them only to spot fraud and repeat abuse, and only StillSparkly admins can look at them.
- Other sources: if a seller gives us an eBay username, we collect the public feedback and reputation details shown for that eBay account.
3. How We Use Your Information
We use your information to run the marketplace (accounts, listings, checkout, shipping, returns, and payouts), let buyers and sellers talk to each other, send you order updates and account messages, provide support, improve StillSparkly, measure and improve our marketing, and prevent fraud and abuse and keep everyone safe. We also use it to comply with the law and to enforce our Terms.
4. Who We Share It With
Other users. Your username, profile photo, bio, listings, and reviews are public. When you buy something, the seller gets the shipping name and address they need to send it to you, and your messages go to the person you're writing to.
Service providers who process information for us:
- Supabase (our database, sign-in, and file storage) and our hosting provider, Vercel.
- Stripe for payments, seller payouts, and identity checks. At checkout we also send your shipping address to Stripe to check whether sales tax applies to your order.
- Shippo to buy USPS shipping labels and track packages (they receive names, addresses, and package details), and XCover (Cover Genius), which provides the shipping protection included on labels.
- Twilio for text messages and phone verification.
- Resend to send our emails.
- Google, whose image and text processing powers our listing and valuation tools. Photos and listing details you submit to those tools are sent to Google to be processed.
- Cloudflare Turnstile to keep bots and abuse away from features like sign-up, checkout, and our valuation tool. It checks your browser invisibly, and Cloudflare's handling of that data is described in the Cloudflare Turnstile Privacy Addendum.
- PostHog and Google Analytics for product analytics, and the Meta (Facebook) Pixel for measuring ads (see Section 5).
Social platforms. To show your listings to more people, we post them on Instagram, Facebook, and Pinterest, using your listing photos, title, description, and link. Those posts are public, and once something is posted on those platforms, their policies apply to it. We don't post your contact details.
Fraud prevention and legal reasons. We may share information with payment processors, shipping carriers, other platforms, and law enforcement when we think it's needed to investigate or prevent fraud, abuse, or illegal activity, to enforce our Terms, to respond to legal requests, or to protect people's safety. If StillSparkly is ever sold or merges with another company, your information may go with it.
Text messages. We do not share mobile phone numbers or text messaging consent with third parties for their marketing purposes.
6. Photos and Listings
Listing photos are publicly visible on StillSparkly, and may appear on our social channels as described above. Photos you upload for a listing or a valuation are stored securely and processed by Google as part of our listing and valuation tools, so we can suggest descriptions and detect item characteristics. Those suggestions are estimates, not appraisals. When you delete a listing, we remove its photos from our storage.
Before a listing goes live, its photos and text are screened by Google's tools (for things like prohibited items and brand claims), and some listings are held for a person on our team to look at. When we post a listing to social media, we may clean up its photos first using Google's generative image editing (for example, to tidy the background). The edited copy is what gets posted, and your original photos stay as you uploaded them.
7. Communications
When messaging is available, messages between buyers and sellers are stored so people can complete transactions and so we can resolve disputes. We don't read private messages except when we need to investigate a reported violation, fraud, or a support request, or when the law requires it. When someone messages you, we may email you a copy or a notification.
We send account and order emails because you need them. We may send occasional emails about new pieces or features, and you can unsubscribe from those with the link in the email. Text messages are covered in Section 4 and in our Terms, and you can reply STOP at any time.
8. How Long We Keep Information
- Account and profile information: as long as your account is open. When you delete your account, we anonymize your profile (see Section 9).
- Listings and photos: while the listing exists. Once a listing is deleted, we remove its photos from our storage (usually within two weeks), though copies already posted on other platforms stay until they're removed there.
- Orders, payments, shipping, and return records: kept for as long as we need them for tax, accounting, fraud prevention, and legal reasons (typically several years), even after an account is deleted.
- Messages: kept while both accounts exist, and afterward as needed for disputes, safety, and legal reasons.
- Fraud and security records: for as long as we reasonably need them to protect StillSparkly and its users.
- Fraud-prevention codes (Section 2): deleted 90 days after we collect them. The exception is an account that has been suspended, or is under review for matching a suspended account: we keep its codes for as long as the suspension or review lasts, so a banned account can't come straight back under a new email. If you delete your account, we delete your codes right away (unless the account is suspended).
- What's it worth tool: the email you give and any photos we store for you are deleted 30 days after your estimate. (If you turn an estimate into a draft listing, the photos become part of that listing.)
- Analytics and advertising data: for the time our analytics providers hold it under their settings.
9. Deleting Your Account
You can delete your account from your account settings. We can't do it while you have an order that hasn't been delivered, a return that's still open, or earnings still on the account, so you may need to wait for those to finish first. When you delete, we take your active listings down, and scrub personal details from your profile (your name, username, bio, photo, location, phone number, text consent, notification token, and saved shipping address). We delete your saved items, saved searches, notifications, and blocked-user list, and we try to delete your login entirely. If you've ever bought, sold, messaged, or reviewed, we can't erase those records without breaking the other person's order history, so we keep them tied to an anonymized profile (shown as “Deleted User”) and lock the login (and replace its email address) so it can't be used again. Order and payment records are kept as described in Section 8. Suspended accounts can't be deleted while we investigate, but you can still make a privacy request (to see, correct, or delete your information) by emailing support@stillsparkly.com. We'll respond as described in Section 11, and we may need to keep some records that relate to the suspension.
10. Security
We use industry-standard safeguards including encryption in transit (HTTPS/TLS), secure sign-in, and access controls. No method of transmitting or storing data is perfectly secure, so we can't promise absolute security.
11. Your California Privacy Rights and Notice at Collection
What we collect and why. In the last 12 months, we collected these categories of personal information, for the purposes described in Section 3, and kept them for the periods in Section 8:
- Identifiers (name, email, username, phone number, IP address, device identifiers, notification tokens).
- Customer records and commercial information (shipping address, orders, sales, and returns; payment details are handled by Stripe).
- Internet and device activity (pages viewed, actions taken, cookie and pixel data).
- Photos, messages, and other content you post or send, and inferences drawn from your activity to run and improve the service.
- Limited sensitive information: your account login (email and password). We use it only to run your account and keep it secure.
We share these with the service providers and platforms in Section 4. We don't sell personal information for money, but sharing identifiers and activity data with advertising partners may count as “sharing” for cross-context behavioral advertising (see Section 5).
Your rights. If you're a California resident, you can ask us to:
- tell you what personal information we collect, use, disclose, and share about you, and give you a copy;
- delete personal information we hold about you (with exceptions the law allows, like records we need for taxes or fraud prevention);
- correct information that is wrong; and
- stop sharing your information for advertising (see Section 5).
We won't treat you differently for using these rights. To make a request, email support@stillsparkly.com. We'll confirm it by matching details to your account, and we'll respond within 45 days (if we need more time, we'll tell you and it can be extended once by another 45). You can also have an authorized agent make a request for you. We may ask for proof they can act on your behalf. Residents of some other states have similar rights, and you can use the same email address to make a request.
12. Children's Privacy
StillSparkly is for people 18 and older, and we don't knowingly collect personal information from anyone under 18. If we learn we have, we'll delete it promptly.
13. Changes to This Policy
We may update this policy from time to time. We'll tell you about material changes by email or with a notice on the site. Continuing to use StillSparkly after a change takes effect means you accept the updated policy.
14. Contact
For privacy questions or requests, contact us at support@stillsparkly.com.
StillSparkly is operated by Sparkly Empire LLC, based in San Francisco, California.