Privacy Policy

About ThriftClothing.com

ThriftClothing.com is a directory of physical secondhand clothing stores. We help shoppers find thrift stores, vintage shops, and consignment boutiques. This policy explains what information we collect, how we use it, and your choices.

Information you provide

• Store claim submissions — your name, email address, job title, business relationship, and any verification details you choose to provide when claiming a listing.
• Suggested edits — your proposed correction and, optionally, your email address if you wish to be contacted about your submission.
• Owner accounts — your email address, used to send a magic link for passwordless sign-in. We do not store passwords.

Information collected automatically

• Anonymous usage events — page views, store visits, and search queries are recorded with an anonymous session identifier. These events are not linked to your name, email address, or any persistent account.
• IP address (rate limiting only) — your IP address is read to enforce rate limits on form submissions and search. It is not stored in our database.

Cookies

We use functional cookies only — no advertising or tracking cookies.

• thrift_owner_session — set when a verified store owner signs in. Expires after 30 days. Required to use the owner portal.
• thrift_admin_session — set when an administrator signs in. Expires after 24 hours. Scoped to admin routes only.

Both cookies are httpOnly and transmitted only over HTTPS. We do not use cookies for advertising or to track you across other websites.

How we use your information

• To review and process store ownership claims.
• To send magic-link sign-in emails to verified store owners.
• To review and apply suggested directory corrections.
• To understand aggregate usage patterns and improve the directory.
• To enforce rate limits and prevent abuse.

What we do not do

• We do not sell your personal information.
• We do not use third-party advertising networks or tracking pixels.
• We do not store IP addresses in our database.
• We do not create user profiles for advertising purposes.

Service providers

We use the following third-party services to operate ThriftClothing.com. Each processes data only as necessary to provide the service.

• Vercel — web hosting and content delivery.
• Neon — database (stores claim, edit, and account data).
• Upstash — rate-limit cache (processes IP addresses transiently; does not store personal data persistently).
• Resend — email delivery (receives email addresses for magic-link and claim notification emails).
• MapTiler — map tile provider (your browser contacts MapTiler's servers when viewing the interactive store map).

Third-party links

Directory listings may include links to store websites, Google Maps directions, and social media profiles. These are independent services with their own privacy policies. We are not responsible for their content or data practices.

Data retention

• Claim and edit records are retained as long as needed to operate the directory.
• Owner account email addresses are retained while the account is active.
• Magic-link tokens are single-use and expire after 15 minutes.
• Anonymous analytics events are retained for up to 13 months.
• Rate-limit data is transient and not stored persistently in our database.

To request deletion of your personal information, use the contact form below.

Children's privacy

ThriftClothing.com is a public store directory not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information to us, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in a revised effective date at the top of this page. Continued use of ThriftClothing.com after changes take effect constitutes acceptance of the updated policy.

Governing law

This policy is governed by the laws of the State of Florida, without regard to its conflict-of-law provisions.

Contact

Questions about this policy? Contact us.