Privacy

To run a shop we hold:

• Your email address and password. The password is stored hashed by our sign-in provider — we can’t read it.
• Your display name, and your shop’s name, address (the part in the URL), bio and policies.
• The payment handles you choose to publish, such as a PayPal or Venmo username. These are shown to buyers after they order, because that’s how they pay you.
• Your listings, including the photographs and video you upload.
• Orders placed with you, including the buyer’s name, email and shipping address.

You don't need an account to buy. When you place an order we collect your name, email address and — unless you're collecting in person — your shipping address.

The seller can see all of it, because they have to post you a parcel and tell you how to pay them. Your email is also used to send your order confirmation and to let the seller reply to you about the order.

• Card numbers, bank details, or any other payment credential. Payments never pass through this site, so we have nothing to store and nothing to lose.
• Third-party analytics. No Google Analytics, no advertising pixels, no session recording, no profiling, and nothing shared with an analytics company. We keep our own counts — described under "How we count visits" below.
• Your location, contacts, or anything from your device beyond the photographs you deliberately upload.

Sellers pay for a shop here, so they need to know whether it's working — how many people saw a stone, what buyers searched for, and which link brought them. We measure that ourselves rather than handing it to an analytics company.

Each time a page is viewed we record:

• What happened — a shop viewed, a stone viewed, a search, something added to a basket, a checkout started, an order placed.
• Which shop or stone it concerned, and what was searched for.
• Where you came from — the site that linked you, by name only (for example "facebook.com"), never the full address of the page you were on.
• The country, from our host. Nothing more precise, and never your IP address.
• A random id from a cookie, so a visit hangs together as one visit rather than five unrelated hits.

Sellers see counts for their own shop only. Nobody can see your name, your email or your browsing next to these numbers, because we don't record them.

We set two kinds, both our own, and neither shared with anyone:

• Sign-in cookies. Strictly necessary — without them the site can’t keep you logged in.
• One counting cookie (tmr_sid), described just above: a random id, 30-day life, no personal data in it.

There are no advertising cookies and no third-party cookies at all. If you'd rather not be counted, blocking cookies for this site stops it — the site still works, and you'll simply be counted as a new visit each time.

We use a small number of companies to run the site. They process data on our instructions and for no other purpose:

• Supabase — Database and sign-in. Holds accounts, shops, listings and orders.
• Cloudflare R2 — Stores the photos and video sellers upload, and serves them to visitors.
• Resend — Sends our email — sign-in links, password resets and order notifications.
• Vercel — Hosts and serves the website itself.

Other than that, we share personal data only between the buyer and seller of an order, and where the law requires it.

• Your account and shop: while your account is open.
• Orders: kept even after a shop closes. Both the buyer and the seller need to be able to look up what was bought, and a closed shop must not erase someone else’s purchase record.
• Photographs and video: until you delete the listing, or your account.

Your shop name, bio, logo, banner, listings and photographs are public — that's the point of a storefront. Your email address is not published. Your published payment handle is shown to a buyer once they place an order with you.

• Change your display name, email or password in your account settings at any time.
• Edit or delete listings and photographs whenever you like.
• Pause your shop to take it out of public view without deleting anything, or close it permanently.
• Ask us for a copy of your data, or ask us to delete it. Order records connected to other people’s purchases are the one thing we may have to keep.

Depending on where you live you may have further rights over your data — to correct it, restrict how it's used, or object to that use. Write to us and we'll help.

This site isn't intended for children, and we don't knowingly collect their data. If you believe a child has given us information, tell us and we'll remove it.

Access to data is enforced at the database itself, so a shop's orders and settings are readable only by its owner rather than relying on the website to remember to check. Traffic is encrypted in transit. No system is perfect, and we'd rather tell you that than promise otherwise.

For anything on this page, including a request to see or delete your data, write to support@trademyrocks.com.

Postal address: P.O. Box 285, O'Fallon, IL 62269, USA