Privacy Policy

sites.me is a storefront, link-in-bio, and marketplace platform for digital assets. We are the “business” / “controller” responsible for the personal information described here. Contact: info@sites.me.

Information you provide:

• Account information -- your email address and a password (passwords are stored in hashed form by our authentication provider; we don't see them).
• Profile and storefront information -- your handle, display name, bio, avatar, links, and social handles. Note: your storefront and listings are public.
• Listings -- the assets you list and their descriptions, prices, metadata, and status.
• Offers and messages -- if you make an offer, we collect the name, email, offer amount, and message you submit.
• Watchlist / notifications -- if you choose to be notified about a listing, we collect your email address for that purpose.
• Payment information -- when paid memberships are enabled, payments are processed by our payment processor (e.g., Stripe). We receive limited details (such as the last four digits of your card, billing info, and transaction status); we do not store full card numbers.
• Communications -- messages you send us (e.g., support requests).

Information collected automatically:

• Usage and device data -- IP address, browser and device type, pages viewed, referring pages, and timestamps, collected through standard logs and similar technologies.
• Cookies and similar technologies -- used to keep you signed in, remember preferences, and understand usage. See “Cookies” below.

We do not knowingly collect special categories of sensitive personal information, and the Service is not intended for anyone under 18.

We use personal information to:

• Provide, operate, and secure the Service (create your account, host your storefront and listings, deliver offers and notifications).
• Process memberships, billing, and renewals.
• Communicate with you about your account, transactions, security, and (with any required consent) updates and marketing -- you can opt out of marketing at any time.
• Prevent fraud and abuse, enforce our Terms, and comply with legal obligations.
• Analyze and improve the Service.

Our legal bases (where applicable) include performance of our contract with you, our legitimate interests in operating and improving the Service, your consent, and compliance with law.

We share personal information only as described here:

• Publicly -- your storefront, handle, profile, and listings are public by design and visible to anyone, including search engines.
• With other users -- when you submit an offer, the relevant seller receives your name, email, offer amount, and message so they can respond to you directly.
• Service providers -- vendors who process data on our behalf under contract, such as Supabase (authentication, database, hosting), Stripe (payments), and our email provider (transactional and notification emails). They may only use the data to provide their services to us.
• Legal and safety -- when required by law, legal process, or to protect rights, safety, and the integrity of the Service.
• Business transfers -- in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell personal information and do not share it for cross-context behavioral advertising (as those terms are defined under California law).

We use strictly necessary cookies (for sign-in and security) and may use functional/analytics cookies to understand and improve usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to comply with legal, tax, accounting, and dispute-resolution obligations. You can ask us to delete your account and data (see “Your rights”).

We use reasonable technical and organizational measures (including access controls and database-level security rules) to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know / access the personal information we have collected about you and how we use and disclose it.
• Delete personal information we hold about you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information -- note: we do not sell or share personal information, so there is nothing to opt out of.
• Limit the use of sensitive personal information -- we do not use sensitive personal information for purposes that trigger this right.
• Non-discrimination -- we will not discriminate against you for exercising your rights.

Categories we collect include identifiers (e.g., name, email, IP address), commercial information (listings, offers, membership), internet/usage activity, and payment-related information (handled by our processor). We collect these for the business purposes described above and disclose them to the categories of recipients in Section 4.

To exercise a right, email info@sites.me with your request. We will verify your request (typically by confirming control of your account email) and respond within the timeframes required by law. You may use an authorized agent where permitted.

Other regions

If you are in a jurisdiction with additional rights (for example, the EU/UK GDPR -- access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority), you may exercise them by contacting info@sites.me.

The Service is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact info@sites.me and we will delete it.

We are based in the United States and process information there. If you access the Service from outside the U.S., you understand your information will be processed in the U.S. and other countries where we or our providers operate, which may have different data-protection laws.

We may update this Policy. We will post the updated version with a new effective date and, for material changes, take additional steps to notify you where appropriate.

Questions or requests about this Policy or your personal information: info@sites.me.