Privacy Policy

Yardsale · Last updated 19 August 2026

The short version

Yardsale is built so that buyers and sellers stay anonymous to each other. It has no advertising, no analytics, no trackers, and it sells nothing to anyone. The information it holds is the minimum needed for a marketplace to function.

If you delete your account, your data goes with it.

What Yardsale collects

Your school email address. Used only to confirm you are a Johns Hopkins student and to send you a one-time sign-in code. It is never shown to other users.
Your listings — title, description, price, photos, and the general area you choose for pickup.
Messages you send to other users about a listing.
Activity needed to make the app work — which listings you have saved, which you have viewed recently, who you have blocked, and a score reflecting completed buys and sells.
Reports you file about a listing, so they can be reviewed.

What Yardsale deliberately does not collect

No real names. There are no profile names and no profile photos. Other users see an anonymous avatar and a number.
No exact location. Pickup locations are general areas, never an address.
No location data from your photos. iPhone photos normally carry the exact GPS coordinates where they were taken — often someone's dorm room. Yardsale rebuilds every photo before uploading it, which removes the coordinates along with the camera model, lens and capture time. This has been verified by uploading a location-tagged photo and inspecting what was actually stored.
No tracking. No advertising identifiers, no analytics SDKs, no third-party trackers, no cross-app or cross-site tracking of any kind.
No contacts, no calendar, no microphone, no precise location. The app does not ask for them.

Who else is involved

Yardsale relies on a small number of services to run. None of them are given your data for their own purposes.

Supabase — hosts the database, the photo storage and the sign-in system.
Google (Gmail) — delivers your one-time sign-in codes by email.
Resend — delivers notification email when a listing is reported.
Cloudflare — hosts this website.

Your information is never sold, rented, or shared for advertising.

What other users can see

Anyone signed in can see your listings, your score, and how many items you have bought and sold. Someone you are messaging can see those messages. Nobody can see your email address, your saved listings, your viewing history, or who you have blocked.

Deleting your account

You can delete your account at any time from the menu on your profile screen. Doing so removes your account, your listings, your messages and your photos.

Messages already delivered may remain visible in the other person's conversation, in the same way a text message you have sent does not disappear from someone else's phone.

Keeping it secure

Traffic between the app and the server is encrypted. Your sign-in session is held in the iPhone's Keychain. Database rules enforce, on the server, that you can only read and change what belongs to you — the app is not trusted to police itself.

No system is perfect, and Yardsale is a student project rather than a company. Please do not put anything in a listing or a message that you would be unwilling to have seen.

Children

Yardsale is for enrolled Johns Hopkins students and is not directed at children under 13.

Changes

If this policy changes in a way that affects what is collected or who it is shared with, the date at the top of this page will change and the app will say so.

Contact

Questions, or a request to have your data removed: hello@yardsalecampus.com