Privacy Policy
This explains what LureCycle collects, why, and what we do with it. Short version: we collect what’s needed to run a marketplace, we don’t sell it, and the most sensitive parts — your card and your bank details — never reach us at all.
What we collect
- Account: username, email address, password (stored only as a hash we can’t reverse), and anything you choose to add — display name, state, photo, bio.
- Listings: titles, descriptions, prices and photos you upload.
- Orders: what was bought, for how much, the tracking number, and the status.
- Messages: what you send other members through the site.
- Technical: IP address and browser details in server logs, and a session cookie to keep you signed in.
What we never see
Card numbers and bank details. Payments run through Stripe, and payouts go to a Stripe account you set up and control. Those details are entered on Stripe’s systems and are never stored on, or transmitted through, our servers. If you sell here, Stripe collects identity details to satisfy financial regulations — that information is between you and Stripe, and is covered by Stripe’s privacy policy.
Why we use it
- To run your account and show your listings to buyers
- To take payment, hold it, and pay sellers
- To let buyers and sellers talk to each other
- To email you about things that happened — an order, a message, a password reset
- To investigate reports, fraud and abuse
We don’t sell your data, and we don’t send marketing email you didn’t ask for.
What other people can see
Your username, display name, photo, bio, state and your active listings are public. Your email address is not shown to other members. When you buy something, the seller sees your username and gets your shipping address through Stripe so they can post the item.
Who we share it with
- Stripe — payments and payouts
- SendGrid — sending the emails above
- ServerPoint — hosting
- Law enforcement, where we’re legally required to
That’s the whole list. No advertisers, no data brokers.
Cookies
We use a session cookie to keep you signed in and a security token to protect forms from being submitted by other sites. Both are necessary for the site to work. No advertising or analytics trackers — our emails don’t carry tracking pixels either.
How long we keep it
Account and listing data for as long as you have an account. Order records for 7 years after the sale, because tax and financial rules require it — this applies even if you close your account. Server logs are kept short-term for debugging.
Your choices
You can edit or remove most of your information from your profile at any time. To get a copy of your data or ask us to delete your account, email hello@lurecycle.com and we’ll deal with it within 30 days.
Deleting an account doesn’t remove completed order records, for the reason above.
Security
The site runs over HTTPS. Passwords are hashed, never stored as text. Uploaded images are re-encoded and stored where they cannot be executed. No system is perfectly secure, but we take it seriously and would tell you promptly if something went wrong.
Children
LureCycle is for adults. We don’t knowingly collect information from anyone under 18; tell us if you believe we have, and we’ll remove it.
Changes
If this policy changes materially we’ll say so on the site.