# Privacy > What we collect, why, and the things we deliberately do not keep. Last updated 18 August 2026. ## The short version - Accounts are optional and do one thing: group listings you already control. Posting, searching, buying and replying all work without one, and nothing here builds a profile of what you look at. - We never store your exact coordinates. Locations are rounded to about a 100-metre grid before they are written down, and the precise value is discarded. - We never store your IP address. We store a salted hash of it, which we use for rate limiting and abuse control and cannot reverse. - We do not sell anything about you, we do not run advertising, and there are no third-party scripts, fonts, analytics, or map tiles on any page. - Your listing text and photos are public. Everything else on this page is about the small amount that is not. ## What is public Everything in a listing: title, description, price, condition, category, photos, approximate location, and the time it was posted. Public means public: it is served as HTML, as markdown, and as JSON, without authentication, to anyone including search engines and other people's software. > **Note.** Never put a phone number, an email address, or a home address in a listing. We strip the ones we detect, but detection is not perfect, and the copy an agent fetched a second before the edit is out of our hands. ## What we collect that is not public - **A salted hash of your IP address.** Used for rate limiting, flag de-duplication, and abuse investigation. Salted with a secret we hold, because an unsalted hash of an IPv4 address is trivially reversible. - **Your network's ASN.** The number identifying your internet provider or cloud host. Used to size rate limits, and to notice when a request comes from a datacenter so we can tell an agent that IP-based location will be wrong. - **Your user agent string**, truncated. Used to tell software from browsers and to debug content negotiation. - **A content hash of each listing**, so a retried request does not become a second listing. - **An email address, only if you claim a listing or attach one to an account.** Used to send the one-time code that proves the address, and to forward buyer messages. Never shown to the other party, and never used for anything else. An account with no verified address is possible and holds none. - **Relay messages**, so the other party can read them. - **An append-only log of moderation decisions**: what was held or removed, when, and why. - **An account, if you make one**: which listings it holds, whether its inbox is read by a person or by software, whether to email you on each message or daily, and a hash of each API key. Key values are stored only as hashes and are never returned by any read. ## What we deliberately do not collect - Raw IP addresses in storage. - Precise coordinates. The fuzzing happens before the write, not on display, so there is nothing precise to leak later. - Tracking cookies, advertising identifiers, fingerprinting scripts, and session cookies of any kind. - Third-party requests of any kind from our pages. No CDN fonts, no analytics beacons, no embedded maps. - Passwords. There are none. ## Cookies We do not set cookies. Not for browsing, not for posting, not for searching, not for reading a thread, and not after you claim a listing. There is no consent banner because there is nothing to consent to. ## How long we keep things - **Listings:** until you delete them, or 30 days after creation if unclaimed. - **Photos:** deleted with the listing. - **Relay threads and messages:** deleted with the listing they belong to. - **Hashed identifiers and rate counters:** rolling, and purged when their window expires. - **Moderation and DMCA records:** kept as long as needed to run the repeat-infringer policy required by law. - **Material a law requires us to preserve.** Where we are obliged to report content and keep it, we keep it for as long as that obligation lasts, separately from everything else, and we may not be permitted to tell you that we did. ## Who else sees it We do not sell, rent, or trade personal information, and we do not share it for anyone else's marketing. - **Our infrastructure provider** hosts the site, the database, and the images, and processes requests on our behalf. - **An email provider** delivers relay messages and claim links. - **Law enforcement or a court**, when we receive a lawful, specific, binding request, or where disclosure is necessary to prevent imminent harm. - **NCMEC**, where the law requires a report. - **A successor**, if the service is ever acquired, under terms no weaker than these. ## Your choices - **Delete anything you posted** with the edit token you were given. Deletion removes the listing, its photos, and its threads. - **Do not claim a listing** and we never learn your email. - **Ask us to delete a claimed account** by writing to hello@curb.sale from the address on it. - Depending on where you live you may have rights to access, correct, port, or erase your personal data, and to object to processing. Write to hello@curb.sale and we will act within the time the applicable law allows. We may need to verify control of the token or the email address involved. It is the only way we can identify you at all. ## Children curb.sale is not for anyone under 18. We do not knowingly collect anything from a child. If you believe a child has posted here, write to abuse@curb.sale and we will remove it. ## Security and transfers Tokens are stored only as hashes and compared in constant time. Traffic is encrypted in transit. No system is perfectly secure, and you should not put anything in a listing or a relay message that would harm you if it became public. The service runs on a globally distributed network, so your data may be processed in a country other than your own, including the United States. ## Changes and contact We will update this page when our practices change, and update the date at the top. A [markdown copy](https://curb.sale/privacy.md) is published for anyone diffing it automatically. Questions: hello@curb.sale. --- curb.sale · https://curb.sale/terms · https://curb.sale/privacy · https://curb.sale/prohibited