Privacy Policy

Sellpile ("we," "our," or "us") keeps your piles on your phone. This policy says exactly what leaves it, where it goes, and how long it stays.

On Your Phone

Your photos, your decisions, the photos you keep and the items out with someone are stored in your browser (IndexedDB), up to 1,000 decisions. They are not sent to us. A photo is saved there before anything else happens, so a crash does not lose it. Clearing your browser data, or Clear in the app, erases the piles.

Getting a Verdict

When you ask for a verdict, that one photo is sent to our server and forwarded to Anthropic's Claude API to identify the item. We do not keep the photo after the verdict comes back. Anthropic's handling is governed by its own privacy policy.

Your first 50 verdicts are free. To count them, your browser keeps a random device id, and our server keeps a keyed hash of it with a count. To stop abuse, our server also keeps counts keyed by a hash of your network address. We never store the address itself.

Asking Someone

Asking a friend or family member about an item is optional and needs a Google sign-in. When you send an ask, our server (on Supabase) stores:

• your first name, which the person you ask sees
• a keyed hash of your email address, never the address itself
• the item's name and category, and your question if you add one
• on an everyday ask, the AI's read, the pile it leaned to and its rough price estimate. When asking family, the read and the lean are left out, and the estimate is sent only if you switch it on
• the photo, only if you switch it on. It is re-encoded on your phone first, which removes location data
• their answer, and the optional note they write

The link closes on the first answer, or after 48 hours (7 days when asking family). The photo is deleted the moment the link closes, or if the link is reported. The rest is deleted once your phone collects the answer, and 7 days after the link closes at the latest. "Take it back" deletes it at once. The label you give each person stays on your phone.

The person you ask needs no account. Their page runs no analytics, shows no cookie banner and stores nothing in their browser. Our server keeps a hash of their network address only to limit how many answers or reports one address can send.

Signing in keeps a session cookie on your device for up to 30 days.

Analytics and Errors

• Usage analytics (PostHog): only if you accept them in the cookie banner. Events never include photos, item names or anything you type, and sessions are not recorded.
• Error reports (Sentry): crash details to help us fix bugs. They do not include your photos or your decisions.

Who Processes Data for Us

• Anthropic: identifies the item in a photo you send for a verdict
• Supabase: stores asks and the free-verdict counts described above
• Google: sign-in, only if you send an ask
• Vercel: hosts the app
• PostHog: usage analytics, only with your consent
• Sentry: error reports

Your Choices

• Clear your piles at any time with Clear on the results page
• Take back an ask, which deletes it from our server at once
• Leave the photo off when you ask, and the estimate when asking family
• Accept or reject analytics; we ask before any is collected
• Write to us to have anything we hold about you deleted

Contact