Privacy policy

Your account. Your email address, and a password if you sign up with one. Passwords are stored only as a secure hash by our authentication provider; we never see them. If you sign in with Google, Google shares your name, email address, profile picture and an account identifier with us.

Your store (public). Your handle, name, bio, photo, the Instagram and TikTok usernames you add, how your store looks, and whether it is public or private.

What you post (public unless your store is private or the post is a draft). Products: the link, name, your note, photos, price, shop, tags and room. Comments you write. Who you follow and who follows you, which appear on your follower lists.

Private to you. What you keep (your Kept list) and what you like. Only you can see these lists; the person whose post it is gets a notice that you kept or liked it, and others see only how many people like a post, described in words rather than a count of who.

Answers when you create your store. Your name, what people ask you about, where you plan to share your store and how often you get asked, plus the page you were on when you decided to sign up. Only you can see these; we use them to suggest people to follow and to understand which shared links bring people in.

Notifications, reports and blocks. The notices we show you (follows, likes, keeps, comments), any report you send us about a post or a person, and the people you block.

Technical information. Our hosting and authentication providers keep standard logs, such as IP address, browser type and times of requests, to keep the service running and secure.

We use only what ops needs to work. No advertising or analytics cookies.

• Sign-in cookies keep you logged in.
• A return-path cookie (up to one hour) brings you back to the page you were on after you log in, and notes the page you signed up from.
• A feed cookie (up to a year) remembers when you last opened your feed, so we can mark what is new.
• Your browser’s local storage holds your answers to the create-your-store questions until your store exists, and remembers if you closed the “browsing as a guest” bar for that visit.

• To create and run your account and your store, and to show your public store to anyone who visits it.
• To run the social parts: your feed, follows, likes, keeps, comments and notifications.
• To suggest people you might want to follow.
• To send the emails ops needs, such as password resets and, if required, confirming your address.
• To keep ops safe: preventing abuse, reviewing reports, and enforcing our Terms.
• To understand, in aggregate, how people find ops (for example, which shared stores bring sign-ups).

If you are in the European Economic Area or the UK, we rely on these legal bases: performing our contract with you (running your account and store), our legitimate interests (safety, improving ops, understanding how people find it), and your consent where we ask for it.

A public store is meant to be seen: your handle, name, bio, photo, products, comments and follower lists can be viewed by anyone, shared, and found through search engines. Make your store private in Edit profile to hide it from everyone but you. Changing your handle changes your store’s address; links using the old handle stop working.

We do not sell your personal information. We share it only with the services that run ops for us:

• Supabase, which stores our database, photos and accounts, and handles sign-in. Data is stored in the United States.
• Railway, which hosts the ops website.
• Google, only if you choose to sign in with Google.
• Our email provider, to deliver password-reset and confirmation emails.

Buying something. When you tap “Buy”, you leave ops for the shop. If the store owner has set up an affiliate account, the link carries their affiliate tag, and the shop or affiliate network may use cookies under its own privacy policy. We do not pass your account details to shops.

We may also disclose information if the law requires it, or to protect the safety of people using ops.

We keep your information while you have an account. If you ask us to delete your account, we delete your profile, posts, comments, likes, keeps and answers, except anything we must keep to meet a legal obligation or resolve a dispute. Logs kept by our providers are deleted on their own schedules.

• Edit your profile and posts, or delete posts and comments, at any time.
• Make your store private, or block someone.
• Ask us for a copy of your information, to correct it, or to delete your account, by writing to [email protected].

Depending on where you live, you may also have the right to object to or restrict how we use your information, to take it elsewhere, and to complain to your data protection authority. We will answer requests within one month.

ops is not for children. You must be at least 16 to use it. If you believe a child has given us information, contact us and we will delete it.

We use access rules so that each piece of private information can be read only by the person it belongs to, and our providers encrypt data in transit. No service is perfectly secure, so please use a strong password you do not use elsewhere.

If we change this policy, we will update the date at the top, and for significant changes we will let you know on ops or by email before they take effect.