Privacy Policy

1. What we collect

• Account details: the email address and display name you sign up with. If you register with an email and password, the password is stored only as a salted scrypt hash, never in plain text. An avatar and a bio are stored only if you upload or write one.
• Google sign-in: if you choose to sign in with Google, the site asks only for the openid, email and profile scopes. That gives it your Google account identifier, your email address (and whether it is verified) and your name. The name is used as your starting display name, which you can change at any time. The site does not keep your Google profile photo and has no access to your contacts, Gmail, Drive or any other Google data.
• What you do on the site: your collection (including any price or notes you record for an item), comments, reactions (“like” and “looking forward”), group buys (ones you open or join, the paid and received status you mark yourself, evidence photos and notes you upload, and reports), who you follow, submissions (product details and images), and anything you send through the feedback form, including contact details you choose to leave.
• IP addresses: used to rate-limit requests and keep out spam and abuse. Raw IP addresses are not stored. The site keeps only a truncated HMAC-SHA256 hash made with a server-side secret — enough to count requests, not enough to recover the address. Rate-limit records are cleared after about a day; comments and feedback keep the hash alongside them so repeat abuse can be spotted.
• Cookies and local storage: a sign-in session cookie (guzi_user, HttpOnly, valid for 30 days; the server stores only a hash of it); an anti-forgery cookie used during Google sign-in (guzi_g_state, expires after 10 minutes); and your light / dark theme choice, kept in your browser’s localStorage and never sent to the server. Cookies set by third-party services are covered in section 4.

2. How we use it

• to run your account, sign-in, and features such as collections, comments, group buys, following and the activity feed;
• to show your public profile and achievements;
• to rate-limit, fight spam, and handle reports and rule-breaking;
• to act on your feedback, corrections and copyright requests;
• to understand how the site is used, through visitor statistics, so the content can improve;
• to show ads, which pay for keeping the site running.

The site never sells personal data and never gives your email address to other users or to advertisers.

3. What is public

Anyone can open your profile page. It shows your display name, avatar, bio, join date, comment count, following and follower counts, and your achievements (public by default; you can hide them on your account page).

Your collection is private by default. Others can see which items you own only after you turn on “Show which goods I own” on the account page — and even then, the prices and notes you record stay private.

Comments you post and group buys you open or join — including your display name, notes and evidence photos on a group’s progress trail — are visible to every visitor. A report appears on the public trail only as “someone reported”, with no reporter name and no text. Your email address is never shown publicly.

4. Third-party services

• Google Analytics (GA4): counts visits, page views and roughly where visitors come from, and sets Google’s analytics cookies. It loads only on the live site.
• Google AdSense: the site shows ads through Google AdSense. Google and its partners may use cookies to show you personalized ads based on your visits to this and other websites. See how Google uses data from sites that use its services; you can manage or turn off personalized ads in Google Ad Settings.
• Google sign-in: the sign-in step is handled by Google under the Google Privacy Policy.
• Amazon Web Services (AWS): the web server, the database and all images (product photos, avatars, group-buy evidence, submitted images) are hosted on AWS, with images stored in Amazon S3.

5. Where your data is stored

All data is stored in AWS’s US West (Oregon) region, us-west-2. If you use the site from outside the United States, your data is transferred to and processed in the US. The whole site is served over HTTPS, the database is not reachable from the internet, and passwords and session tokens are stored only as hashes.

6. How long we keep it

Account data is kept for as long as the account exists. Rate-limit records are cleared after about a day, and expired sessions are cleaned up regularly. A comment you delete disappears from the site straight away; if you want it erased completely, ask through the feedback form.

When an account is deleted, its collection, reactions, follows, comments and the group buys it opened are deleted with it. Entries it left on other people’s group buys stay on the trail, to protect the other participants, but no longer show its name. Feedback it sent is kept but no longer linked to the account.

7. Your rights and choices

• See and correct: once signed in, you can change your display name, bio and avatar on your account page, and choose whether your achievements and collection are public. You can remove items from your collection, undo reactions and unfollow people at any time, and delete your own comments.
• Delete your account: there is no self-service delete button yet. Send a deletion request through the feedback form while signed in (so we can tell it is really you), and it will be handled within 30 days.
• Get a copy, or anything else: use the same feedback form. Any other rights you have under the law where you live — such as the GDPR in the EU or the CCPA in California — can be exercised there too.
• Withdraw Google access: you can remove the site’s access at any time from your Google Account’s third-party access page.
• Ads and cookies: turn off personalized ads in Google Ad Settings, or block or clear cookies in your browser (clearing them signs you out).

8. Children

The site is not meant for children under 13 and does not knowingly collect their personal data. If you learn that a child under 13 has an account, please tell us through the feedback form and the data will be deleted.

9. Changes to this policy

This policy may be updated as the site changes. When it is, the effective date on this page changes too, and significant changes will be pointed out somewhere prominent on the site. Continuing to use the site after a change takes effect means you accept the updated policy.

10. Contact

The site does not publish an email address. For anything at all, use the feedback form; for copyright and takedown requests, choose Copyright / takedown request. See also the Terms of Service.