Privacy Policy

The short version

What we store

Only the categories below. We do not buy, sell, or share your data for advertising, and we run no tracking cookies or analytics.

• Your account (if you create one): a display name, your email address, your password stored only as a salted scrypt hash, account preferences (like locale and currency), and your MCP API key stored only as a SHA-256 hash. We never keep your password or API key in readable form.
• Your listings: everything you publish — title, description, category, condition, brand, price, currency, location, size and shipping details, and any item attributes you or your assistant provide (for example shoe size or ISBN).
• Item photos: images your assistant uploads with a listing, or that you upload from the account area.
• Search vectors: a numeric representation of your listing's text, so search understands meaning, not just keywords.
• App connections (OAuth): when you connect an app such as ChatGPT or Claude Desktop, we store the app's registration (its name and redirect address), your approval linking it to your account, and the access and refresh tokens it uses — all tokens stored only as SHA-256 hashes, never in readable form.
• Orders (when you buy or sell with order tracking): order status and its history, the agreed price, and — for shipped orders — the delivery address and carrier tracking code. The address is visible only to the two parties of the order. When you pay on-platform, we store references to the payment (for example a Stripe payment ID).
• Optional chat-assistant credentials: if you add your own AI provider key, or use “Sign in with ChatGPT” for the built-in chat page, these are stored encrypted (AES-256-GCM) and you can remove them at any time.
• Technical records: rate-limiting counters and security/usage event logs (counts and identifiers only — never message content, secrets, or cookies), plus standard server logs kept for a short period.

How ChatGPT and other AI apps access data

Apps connect through per-user OAuth 2.1 sign-in — the same “sign in with…” flow you know from other services:

• When you add Thingery to an app, you sign in on thingery.dev and approve the connection yourself. The app receives a token tied to your account only: it can see and manage your listings and your orders. It can never see another person's account, and it never sees your password.
• Sign-in tokens are short-lived (30 minutes) and refresh automatically for at most 30 days, rotating on every use.
• Without signing in, an app gets read-only public search: it can find and read public listings, and nothing more.
• You can review every connected app and cut one off instantly at thingery.dev/apps.

What is public

Listings are meant to be found: people, AI agents, and search engines can all read public listing pages. Please keep phone numbers, home addresses, and similar personal details out of listing text and photos — buyers and sellers exchange delivery details privately through the order flow, where the shipping address is visible only to the two parties.

Personal information and payments

Beyond the listings and photos you choose to publish, and the account credentials and technical records described above, the personal information we hold is just two things: your email address, and — for orders you arrange as shipments — the delivery address. The delivery address is visible only to you and the other party of that order.

Payments: when you choose on-platform payment, checkout runs on Stripe's hosted page. Your card details go directly to Stripe and never touch Thingery's servers — we store only payment references (for example a Stripe payment ID) and the order's status. For direct, off-platform payments (such as cash at pickup), we store nothing beyond the order status.

Your control

• Delete a listing: ask your connected assistant (“delete my listing of the blue sofa”) — deleting sets its status to deleted and removes it from search and public pages immediately. You can also request removal by email.
• Revoke an app: open thingery.dev/apps and revoke. The connection and all its tokens stop working immediately.
• Rotate your API key: from the account page — the old key stops working right away.
• Remove chat credentials: also on the account page, including disconnecting “Sign in with ChatGPT”.
• Delete your account: email privacy@thingery.dev from your account's address. We will delete your account, listings, photos, and app connections. For orders you completed with another person, we may keep an anonymized record where needed for disputes and accounting — it will not identify you.

How long we keep data

• Listings stay until you delete them. Deleted listings are hidden from everyone immediately; the underlying record is kept internally only for abuse handling and disputes, and is permanently removed on request or with your account.
• OAuth data is removed automatically: sign-in codes after at most an hour, expired access tokens after a day, unused refresh tokens after 30 days, app registrations no one approved after 7 days, and revoked connections after 90 days.
• Accounts stay until you ask us to delete them.

Service providers

We use as few as possible, each receiving only what its job needs: an AI embedding provider receives listing text to build search vectors; the payment processor (Stripe, when you choose on-platform payment) receives what a payment requires; the shipping carrier service receives the delivery address and parcel details needed for labels and tracking. Thingery itself runs on our own server.

Cookies

One functional cookie when you log in (to keep you signed in). No advertising, tracking, or third-party cookies.

Self-hosted instances

Thingery is open source (Apache-2.0) and anyone can run their own instance. This policy covers only the service we operate at thingery.dev. If you use another instance, that operator's policy applies.

Contact

For access, correction, export, or deletion of your data, or any privacy question: privacy@thingery.dev. We answer within 30 days.

If we change this policy, we will update the date at the top of this page.