Thrift & Tally

Privacy Policy

Last updated 22 October 2026

This policy explains what Thrift & Tally collects, why, who helps us run the service, and the choices you have. The short version: we keep what's needed to track your inventory and run your subscription, we don't sell your data, and we don't use advertising or tracking cookies.

What we store

  • Account details: your name, email address, optional username, a securely hashed password, and two-factor settings if you turn them on.
  • Household details: the household name, who's in it, their roles, who each inventory is shared with, and invitations (including the invitee's email address).
  • Inventory and sales: what you enter or import, such as purchase dates, costs and sources; brand, category, size, condition and storage bin; marketplace listing numbers; sale dates, platforms, prices, fees and shipping; barcodes and notes.
  • Billing: your plan, trial dates and subscription status, and the Stripe customer and subscription IDs. Card details are held by Stripe, not by us.
  • Connected eBay account (only if you connect one): see below.
  • Technical data: sign-in sessions (IP address, browser and last activity), and server logs kept for security and troubleshooting.

How we use it

  • To run the service: show your inventory, dashboard and reports, and let you share with your household.
  • To bill your household's subscription.
  • To send account email: verification, password resets, household invitations and important notices about your account or these policies. We don't send marketing email.
  • To keep the service secure, prevent abuse and fix problems.

We don't sell or rent your personal information, and we don't use it for advertising.

Who helps us run the service

These companies process data on our behalf, only as needed to provide their part of the service:

  • Stripe: payments, subscriptions, invoices and the billing portal. Stripe receives your email, billing address and card details. See Stripe's privacy policy.
  • Resend: sends our account email, so it receives the recipient's address and the message.
  • DigitalOcean: hosts our server, database and backups in the United States.
  • Cloudflare: sits in front of the site for security and speed, so your requests (including your IP address) pass through it.
  • Google Fonts and Bunny Fonts: serve the typefaces the pages use, so your browser requests fonts from them.
  • Open Library: when you look up a book's barcode, the ISBN (and nothing about you) is sent to Open Library.
  • eBay: only if you connect your eBay account or look up a non-book barcode.

We may also disclose information if the law requires it, or to protect the safety of our users or the service.

eBay data

  • Connecting eBay is optional. You sign in at eBay and grant read-only access; we never see your eBay password.
  • We store the access tokens eBay gives us, encrypted, plus your eBay user ID and the time of the last sync.
  • We read your active listings, orders, marketplace fees and shipping-label costs, and use them only to create and update items in your own inventory. We don't post, change or cancel anything on eBay, and we don't share eBay data with anyone else.
  • Disconnecting (Account → Connected accounts) deletes the tokens straight away. Items already imported stay in your inventory until you delete them.
  • If you close your eBay account, eBay notifies us. We check the notification is genuinely from eBay and delete that seller's connection and tokens.
  • Barcode lookups for non-book products send only the barcode to eBay's catalogue search; results are cached for 30 days.

Cookies

We use only the cookies needed to keep you signed in and protect forms (a session cookie and a security token). There are no analytics, advertising or third-party tracking cookies.

Exporting your data

You can download your items as a CSV file from the inventory (Export CSV), and your sales and purchases from the Reports tab, at any time, on any plan.

Deleting your account

  • You can delete your account from your profile settings (Account → Security & two-factor → Delete account). This permanently deletes your sign-in, your inventories and items, and any eBay connection.
  • If you own a household, deleting your account also deletes the household and every member's inventory in it. Consider exporting first, or ask us to help hand the household over.
  • Please cancel your subscription in the billing portal before deleting your account, or email us and we'll cancel it for you.
  • Copies may remain in encrypted backups for up to 4 weeks until those backups expire. Stripe keeps invoice and payment records as tax and financial law require.

How long we keep data

We keep your data while your account exists, on the Free plan too (after a trial ends or a subscription is cancelled), so you can keep using it, come back or export it; you can ask us to delete it at any time.

Security

Connections are encrypted (HTTPS), passwords are hashed, eBay tokens and backups are encrypted, and two-factor sign-in is available to everyone. Each household's data is kept separate from every other household's.

Your choices and rights

You can see and correct most of your information in the app. To ask for a copy of your data, correction, or deletion, or with any privacy question, email [email protected]. We'll answer within 30 days.

Children

Thrift & Tally isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy in a significant way, we'll update the date above and email household owners before the change takes effect.