StoneFjord Marketplace ("StoneFjord," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using StoneFjord, you agree to the practices described in this policy.
1. Information We Collect
We collect information in the following ways:
- Information you provide directly — when you create an account, post a listing, make a purchase, or contact support. This includes your name, email address, mailing address, phone number, payment information, and profile content.
- Transaction data — details of purchases and sales you make on the platform, including item descriptions, prices, and shipping information.
- Communications — messages you send to other users or to StoneFjord through our messaging tools or support channels.
- Usage data — information about how you interact with the platform, including pages visited, search queries, clicks, and session duration.
- Device & technical data — IP address, browser type, operating system, device identifiers, and referring URLs, collected automatically when you access the platform.
- Cookies & tracking technologies — we use cookies, pixel tags, and similar technologies to recognize you, remember your preferences, and improve your experience. See Section 7 for details.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process transactions and facilitate payments
- Connect buyers and sellers and enable communications between them
- Send transactional emails (order confirmations, dispute updates, account notices)
- Send promotional emails and platform updates, where you have opted in
- Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service
- Improve the platform, personalize your experience, and conduct analytics
- Comply with legal obligations and respond to lawful requests from authorities
- Resolve disputes and enforce our agreements
3. How We Share Your Information
StoneFjord does not sell your personal data to third parties. We may share your information in the following circumstances:
- With other users — your public profile, listings, and reviews are visible to other users. When a transaction occurs, limited contact information (such as a shipping address) may be shared between buyer and seller to complete the order.
- With service providers — we engage trusted third-party providers who process data only as directed by StoneFjord and are contractually bound to protect it. These include:
- Stripe (stripe.com) — payment processing and fraud prevention. Stripe may collect and process payment card data and transaction information directly.
- Supabase (supabase.com) — database hosting, user authentication, and file storage. Your account data and uploaded content is stored on Supabase infrastructure.
- Resend (resend.com) — transactional email delivery, including order confirmations, account notifications, and support replies.
- Sentry (sentry.io) — error monitoring and performance diagnostics. Sentry may collect technical data such as IP addresses and browser information when errors occur.
- For legal compliance — we may disclose your information if required by law, subpoena, court order, or to protect the rights, safety, or property of StoneFjord, our users, or the public.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you before your data is subject to a materially different privacy policy.
- With your consent — we may share information in other ways when you have given us explicit permission to do so.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services, resolve disputes, enforce agreements, and comply with legal obligations. If you close your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention or tax compliance.
5. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request that we correct inaccurate or incomplete information.
- Deletion — request that we delete your personal data, subject to legal retention requirements.
- Opt-out of marketing — unsubscribe from promotional emails at any time using the link in any marketing email, or by updating your account notification settings.
- Data portability — request your data in a structured, commonly used format where technically feasible.
- Object or restrict processing — in certain circumstances, request that we limit or stop processing your data.
To exercise any of these rights, contact us at privacy@stonefjord.com. We will respond within 45 days. We may need to verify your identity before fulfilling a request.
6. Data Security
We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration. These include encrypted data transmission (TLS/HTTPS), secure password storage, and access controls that limit who within StoneFjord can view your data. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the platform at your own risk.
If we become aware of a data breach that affects your personal information, we will notify you in accordance with applicable law.
7. Cookies & Tracking Technologies
StoneFjord uses cookies and similar technologies to:
- Keep you signed in across sessions
- Remember your preferences and settings
- Understand how users navigate the platform (analytics)
- Detect and prevent fraudulent activity
- Deliver relevant content and, where applicable, advertising
You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features. We do not currently respond to "Do Not Track" signals, but we will update this policy if that changes.
8. Third-Party Links & Services
StoneFjord may contain links to third-party websites or integrate with third-party services (such as payment processors or social login providers). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with StoneFjord. We are not responsible for the privacy practices or content of third-party sites.
9. Children's Privacy
StoneFjord is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at privacy@stonefjord.com.
10. International Users
StoneFjord is operated from the United States. If you access the platform from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using StoneFjord, you consent to this transfer. We take appropriate steps to ensure that transfers of personal data are made in compliance with applicable law.
11. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:
- 1. Right to Know — You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, the categories of third parties with whom we share it, and the specific pieces of personal information we hold about you.
- 2. Right to Deletion — You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as information needed to complete a transaction, detect security incidents, or comply with legal obligations). You can exercise this right directly by visiting Account Settings → Delete Account.
- 3. Right to Correct — You have the right to request that we correct inaccurate personal information we maintain about you. You can update most information directly in your account profile.
- 4. Right to Opt Out of Sale or Sharing — StoneFjord does not sell your personal information to third parties, nor do we share it for cross-context behavioral advertising. You therefore have no need to opt out, but you may contact us at privacy@stonefjord.com to confirm this at any time.
- 5. Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised a privacy right.
To exercise any of these rights, contact us at privacy@stonefjord.com or submit a request through your account settings. We will respond within 45 days. If we need additional time (up to 90 days total), we will notify you within the initial 45-day period. We may need to verify your identity before fulfilling a request.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on the platform and, where possible, by sending a notice to the email address on file. The updated policy will be effective upon posting unless otherwise noted. Your continued use of StoneFjord after the effective date constitutes acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us:
- Email: privacy@stonefjord.com
- Mailing Address: TBD — P.O. Box address to be confirmed
We aim to respond to all privacy-related inquiries within 5 business days.