Privacy Policy

Last updated: April 12, 2026

Plain-English summary: We collect only what we need. We never sell your data. Your contact info is never shown publicly without your explicit choice.

1. What We Collect

When you post an ad: your ad content, name, and contact info you choose to provide (email and/or phone). We also log your IP address to detect spam.

When you browse: standard server logs — IP address, browser type, pages visited. Cloudflare handles network-level logging independently.

2. How We Use It

Display your ad on the platform
Route buyer inquiries to your chosen contact method
Detect and prevent spam and policy violations
Auto-expire ads after 30 days
Improve the platform using aggregate, anonymized data

3. What We Never Do

Sell your data to any third party, ever
Show your email publicly — contact is routed through our system
Share your IP with buyers or any non-essential party
Send marketing emails unless you opt into our newsletter

4. Data Retention

Active ads are stored for 30 days, then auto-deleted. Expired ad data is purged within 7 days of expiry. IP logs for spam detection are kept 90 days. If you request deletion, we act within 48 hours.

5. Cookies

We use minimal functional cookies only — to remember your filter preferences. Cloudflare sets a security cookie (__cf_bm) for bot protection. No advertising or tracking cookies.

6. Third-Party Services

Cloudflare (hosting, CDN, DDoS), Cloudflare Turnstile (bot protection on post form), Cloudflare R2 (image storage). None receive your personal data beyond what their function technically requires.

7. Your Rights

Request deletion of any ad by contacting us with your ad ID. EU/UK users have additional GDPR rights including data portability and right to object. Contact privacy@addrop.co. Requests processed within 48 hours.