Privacy & data use.
Preview notice. The business operator and support contact must be added before public launch.
What the shop stores
The shop stores your account identifier, contact and shipping information, cart, orders, subscriptions, custom requests, order messages, and photos you upload. Tyers also provide a shop profile and ship-from address.
What other people see
Shop profiles, fly listings, and listing photographs are public when the shop opens. Your tyer can view the shipping address and specifications needed to fulfill your order. Published listing photographs are public. Custom reference photographs require sign-in and permission to access the request. Do not upload private documents. Order messages are saved as part of the order record and can be read by its buyer and current tyer. If you submit a conversation report, you agree to share the saved history through the message identified in the report form with authorized support staff. Later messages require another explicit report update. Your report and support replies are visible to you and authorized support staff; internal staff notes are not shared with participants. Staff may pause messages for both participants without changing payments or orders. Notification emails direct you to the order without including message text. Do not share card details or sign-in codes in messages.
Uploaded photos
When photo uploads are enabled, we may temporarily store your original file in private storage to prepare a processed copy without embedded camera or location metadata. Originals are queued for removal after processing; removal can take longer during service interruptions. Only the processed copy can be shown in a listing or shared as an authorized custom reference.
Payments and shipping
Stripe processes card and payout details. The shop stores payment references and order status, not full card numbers. Shippo receives the sender address, recipient address, and parcel information needed to buy a carrier label.
Account access and cookies
Supabase manages account sign-in using email verification codes. Essential, HTTP-only cookies keep you signed in. An essential, HTTP-only cookie keeps your guest bag in this browser. Guest choices and notes expire after 30 days without a successful change; expired records are removed by scheduled cleanup. Clearing cookies loses access to that guest bag. Anyone using this browser profile can access its guest choices, so do not add sensitive details to notes. After signing in, you choose which guest items to add to your account bag. The guest choices are then removed and a limited retry record remains for up to 30 days. Signed-in bags are stored against your account. The tyer editor keeps an essential save-receipt key in this tab so you can check an interrupted save after reloading. Draft text and inventory inputs are not stored across reloads. The key is removed after a save or cancellation is confirmed; the shop retains a limited receipt to prevent duplicate or delayed saves. When optional analytics is enabled, Google Analytics helps us understand visits to public recipes and shops, discovery links, and whether catalog searches return results. It loads only after you choose Allow analytics. We save your choice for up to 180 days, after which we ask again. You can change your choice using Analytics preferences at the bottom of any page. Declining stops future collection and removes the shop’s Google Analytics cookies; essential sign-in and bag cookies remain. The app reports public page paths, page types, broad result-count ranges, and a recognized referring service such as Google or ChatGPT. It excludes private pages, account and order identifiers, contact and shipping details, form contents, search text, URL query parameters and raw referring URLs from its events. Discovery-link events do not prove that an order was placed or paid. With this same optional consent, Flyfysher can keep the first and last public pages from a visit of up to 30 minutes and a broad referral group in temporary browser storage. If you start checkout while consent is still active, we can link those details to the new order for internal reports of verified purchases and later refunds. We do not send purchase details or your consent receipt to Google. An account-scoped consent receipt is retained for up to 180 days; order discovery links expire after at most 90 days or when consent expires, whichever comes first. Declining also requests deletion of this browser’s existing order discovery links, without deleting financial records. If the request cannot reach us, this browser saves a pending withdrawal and retries on your next visit. Clearing browser storage before that request succeeds removes the deletion receipt, so contact the operator for help; the retention limit still applies. Google also receives technical information such as your browser and device with analytics requests. See how Google uses information from sites that use its services.
Download your records
From Download your data in your account, you can prepare a JSON copy of your shopping and shop records after recent sign-in verification. This includes your own addresses, messages, reports and support replies, notification preferences, listings, inventory, and photo metadata. Image files, other customers’ addresses, internal staff notes, and sign-in secrets are not included. New copies can be prepared only while secure cleanup is operating. The private copy is available in the session that prepared it for up to 30 minutes. Scheduled cleanup removes expired copies; a cleanup interruption can delay removal but cannot extend download access. Replacing a copy or withdrawing discovery-data consent can remove it sooner. A file you already downloaded remains on your device; keep it private. Downloading does not close your account.
Corrections and deletion
Contact the marketplace operator to request correction or deletion of stored information. An operator contact, retention schedule, and any required exceptions for transaction records must be finalized before launch.