Privacy Policy

1. Who we are

This Privacy Policy explains how High Tech Attic ("we," "us"), operated from Pennsylvania, United States, collects and uses information when you use hightechattic.com and related services (the "Service"). For privacy requests, contact support@hightechattic.com.

2. Information we collect

• Account data: email, display name, username, avatar, bio, profile links, member type, and similar profile fields you provide.
• Authentication: session data via our auth provider (including OAuth providers you choose, such as Google).
• Payment data: Stripe customer and subscription identifiers, payment status, and invoices. We do not store full card numbers; Stripe processes payments.
• User content: listings, comments, forum posts, reviews, direct messages, reports, and ads you create.
• Usage & device data: pages viewed, approximate location from IP, browser/device type, referring URLs, and diagnostic logs.
• Cookies & similar tech: essential session and consent cookies; see Cookies below.

3. How we use information

• Provide, secure, and improve the Service
• Process membership and ad payments
• Send transactional email (receipts, security, account notices)
• Moderate content and enforce our Terms of Service
• Prevent fraud, spam, and abuse
• Analyze aggregate usage (where permitted)
• Comply with law and respond to lawful requests

We do not sell your personal information. We do not use your content to train third-party AI models.

4. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we process data based on: performance of a contract (account and paid features); legitimate interests (security, moderation, product improvement); legal obligation; and consent where we ask for it (e.g., optional analytics cookies).

5. Cookies

Essential cookies keep you signed in and remember cookie preferences. They are required for the Service to work.

Optional analytics may be used only if you accept via our cookie banner. You can clear cookies in your browser; blocking essential cookies may break sign-in.

6. Sharing & processors

• Service providers: Supabase (authentication and database), Stripe (payments), and hosting/infrastructure vendors process data on our behalf under appropriate agreements.
• Other users: Public profiles, published listings, forum posts, comments, and reviews are visible as designed. Messages are visible to conversation participants.
• Legal: We may disclose information if required by law or to protect rights, safety, or the integrity of the Service.
• Business transfers: If we transfer operations, data may move as part of that transaction under continued confidentiality expectations.

7. International transfers

We and our processors may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses or vendor certifications for transfers from the EEA/UK.

8. Retention

• Account and profile data: while your account is active
• Billing records: as needed for tax, accounting, and dispute resolution
• Messages, listings, and forum content: until you delete them or your account is removed, subject to backups and legal holds
• Moderation and ban records: as needed to prevent abuse
• Paused listings after membership revocation: limited period (about 30 days), then deleted if not restored

After account deletion requests, we delete or anonymize personal data within a reasonable period, except where retention is required or permitted by law.

9. Your choices & rights

• Update profile data in Dashboard → Settings
• Request access, correction, or deletion of personal data
• Opt out of non-essential marketing email (if we send any) via unsubscribe links
• Request account closure by emailing support@hightechattic.com

Depending on where you live, you may have additional rights (access, deletion, portability, restriction, objection). We will not discriminate against you for exercising privacy rights. To submit a request, email support@hightechattic.com. We may need to verify your identity.

10. U.S. state privacy (including California)

We do not sell personal information as defined by the CCPA/CPRA. We do not share personal information for cross-context behavioral advertising. Categories we collect are described above (identifiers, commercial information related to purchases, internet activity, and user-generated content).

California residents may request to know, delete, or correct personal information, and limit use of sensitive personal information where applicable. Contact support@hightechattic.com. Authorized agents may submit requests with proof of authority.

11. Security

We use HTTPS/TLS, access controls, and industry-standard authentication practices. No method of transmission or storage is perfectly secure. Use a strong unique password. If we become aware of a breach affecting your personal data, we will notify you and regulators as required by applicable law.

12. Children

The Service is for adults 18+. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided data, contact us and we will delete it.

13. Changes & contact

We may update this Policy by posting a new version with an updated date. Material changes may be highlighted in-product when practical. Continued use after the effective date means you acknowledge the updated Policy.

Terms of Service · FAQ · Guide