Privacy Policy

Last updated: October 11, 2026

1. What this policy covers

This policy describes what information WornRep ("we," "us") collects when you use wornrep.com, how we use it, who we share it with, and your rights. By using WornRep, you agree to this policy.

2. Information we collect

• Account information. When you register: your email address, chosen handle, and password (stored hashed). Optionally: bio, profile photo, and the city/state you ship from (shown publicly on your listings as "Ships from …").
• Early-access waitlist. When you join the waitlist: your email address, your personal referral code, and who referred you (if you signed up through someone's referral link).
• Listings. Titles, descriptions, prices, categories, sizes, conditions, brands, parcel weights, and the photos you upload. Listing content is public to other users.
• Messages. The contents of your direct messages with other users, including text and photos you send (up to 4 photos per message). We store messages so both parties have a transaction record and so our team can review disputes and reports. Messages about a transaction may be read by administrators when handling disputes, reports, or support requests.
• Shipping addresses. Sellers: your ship-from name, street address, city, state, ZIP, and phone number (the phone number is required by USPS for label generation). Buyers: the delivery name and address you enter at checkout. Your street address is never shown to the other party — buyers see only the seller's city/state, and sellers see only the buyer's delivery address for the orders they must fulfill.
• Orders and transactions. What you bought or sold, prices, the Buyer Protection fee, shipping method and cost, tracking numbers, label records, payout records, dispute records, and reviews. Feedback you provide about an order — such as ratings, review text, and whether an item arrived clean — is stored with the order.
• Payments. Payments are processed by Stripe. We do not receive or store your full card number or bank login credentials. We store references Stripe gives us (such as customer and payout-account identifiers) and the last 4 digits / brand / expiry of saved cards so we can display them to you. Stripe's own privacy policy governs the data you give Stripe directly.
• Device and technical data. When you use the site: device type, browser, approximate location derived from IP address, pages viewed, and actions taken (e.g., listing views, searches). If you enable push notifications, we store your push subscription so we can send you order and message alerts.
• Photos. Listing and message photos are stored on our servers. We use them to display your listings and messages and to review reports and disputes.

3. How we use your information

• To operate the marketplace: accounts, listings, search, checkout, and order management.
• To process payments and payouts through Stripe, and to generate shipping labels through our shipping partner.
• To detect and prevent fraud, counterfeits, prohibited items, and abuse; and to enforce our Terms of Service (including admin review of reports and disputes).
• To communicate with you: order updates, messages, dispute notices, and (if enabled) push notifications.
• To run referral programs: attributing referrals to the right sharer and awarding free Squat credits.
• To improve the service: aggregated, de-identified analytics about how the marketplace is used.
• To comply with legal obligations, such as tax reporting and responding to lawful requests.

We do not sell your personal information.

4. Who we share it with

• Stripe (payments and payouts): the payment and payout data needed to process transactions.
• Shippo and USPS (shipping): the ship-from and ship-to addresses, parcel details, and phone number needed to rate, buy, and track shipping labels. Your phone number is shared with USPS because the carrier requires it on every label.
• Service providers who host and run the platform for us (e.g., website hosting, database hosting). They process data only on our instructions.
• The other party to your transaction: the limited information described in Section 2 (e.g., a buyer sees the seller's handle and city/state; a seller sees the buyer's delivery address for fulfillment).
• Legal and safety: if we believe disclosure is necessary to comply with the law, enforce our terms, or protect the rights, safety, or property of WornRep, our users, or the public.

We do not share your data with advertisers or data brokers.

5. Photos and messages

Listing photos are public. Message contents (including photos) are visible to the participants in the conversation and to WornRep administrators when reviewing disputes, reports, or support requests. Do not send anything in a message that you would not want the other party — or our review team, in a dispute — to see.

6. Cookies and local storage

We use browser local storage and cookies for essential functions: keeping you signed in, remembering your preferences (such as filters), and security (such as CSRF protection). We do not use third-party advertising trackers.

7. Data retention

We keep your information for as long as your account is active and as needed to operate the marketplace and meet legal obligations. Transaction records (orders, payments, payouts, shipping labels, dispute records) are retained as required by tax, financial, and fraud-prevention law even after an account is closed or suspended.

8. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate information (much of it — handle, bio, addresses — you can edit yourself in Settings).
• Delete your personal information.
• Opt out of push notifications at any time (device settings or in-app settings).

A note on deletion and deactivation: You can deactivate your account yourself at any time from Settings → Deactivate Account. Deactivation suspends your account: your listings are hidden, you are signed out, and you cannot buy or sell — but your account data, order history, and transaction records are preserved (see Section 7). To reactivate, contact us at support@wornrep.com. Deactivation is not deletion: if you want your personal information deleted, contact us at support@wornrep.com and an administrator will handle it. Some records (orders, payments, tax documents) must be retained by law and cannot be deleted on request; we will tell you what we kept and why. You cannot deactivate while you have active orders, unshipped sales, pending payouts, or open disputes — resolve those first.

To exercise any of these rights, contact us at support@wornrep.com. We will respond within the timeframes the law requires.

9. Security

We use reasonable technical and organizational measures to protect your information: encrypted connections (HTTPS), hashed passwords, access controls on our database, and limited staff/administrator access to user data. No system is perfectly secure, and we cannot guarantee against all breaches — but we work to keep your data safe and will notify you as the law requires if a breach affects you.

10. Children

WornRep is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

11. Changes to this policy

If we change this policy materially, we will post the new version here and update the date. Continued use of WornRep after a change means you accept it.

12. Contact

Privacy questions or requests: support@wornrep.com.