Privacy
What ofsale collects, and who receives it. Updated October 22, 2026.
Visiting this site
We use Google Analytics to count visits and see which pages people read. It is the only thing on this site from another company, and its two scripts are the only scripts here: Google's, and a short one of ours that starts it.
Google Analytics sets cookies (named _ga and _ga_DJJRX3JJR3) to tell one visit from another; they last up to two years. Google receives information about your visit, such as the pages you view, the page that sent you here, your browser and device, and your approximate location. In the European Economic Area, the UK and Switzerland it sets no cookies: Google still receives information about the visit, with nothing to tie your visits together. Google's advertising features are turned off for this site, so this information is not used for ads or linked to your Google account.
How Google uses this: How Google uses information from sites or apps that use our services. To turn Google Analytics off in your browser for every site: Google Analytics Opt-out Browser Add-on.
Every visit reaches it through ofsale's edge server at Amazon Web Services (AWS), which passes the encrypted connection through without opening it: it sees your internet address, not the pages you read.
Like any website, the site's server records each visit in its logs: your internet address, the page, the time and what your browser says it is. The logs are used to keep the site running; they are overwritten as they fill up, and older backup copies are replaced as they age out.
Writing to us
Email to support@ofsale.app is forwarded by Porkbun, the company that holds ofsale's domain names, to the inbox we read. We keep your email so we can answer it.
Supporting ofsale
The Support ofsale button opens ofsale’s page on Venmo, and Venmo handles the payment. We see what Venmo shows the account it pays: your Venmo name, the amount and any note you add. We keep that record with ofsale’s books.
Joining as a Solo shop
The join page on hub.ofsale.app asks for your shop's name and, if you want to give it, your email. It makes a passkey on your device to sign you in: the passkey's secret stays on your device, and ofsale keeps only its public half.
The join page sets one cookie, ofsale_join, used only on its own pages. It is a random number that says nothing about you, and it lasts a year.
Your shop keeps your email with your account. ofsale's hub, which sets shops up, keeps it only until your shop is ready, then clears it. What the hub keeps is a fingerprint of it (a SHA-256 hash), not the address itself, and a fingerprint of the join cookie. Your shop also sends the hub fingerprints of its address and of its payout bank account, and whether it reached both Solo limits that month. We use these to notice when one business is running as several free Solo shops. When they match, someone from ofsale gets in touch; nothing is locked and no sale is refused.
If every free shop place is taken when you try to join, you can leave your email on a waiting list instead. We use it for one email: a link to make your shop once there is room. When that email has been sent, or after three tries fail, the hub clears the address and keeps only its fingerprint and the join cookie’s.
To stop one network starting many free shops in a day, the hub counts the join links made from each network that day (the network is the first three parts of your internet address, or the first half of an IPv6 one). It never keeps your address or your network: only a fingerprint of the network, made with a key that is replaced every day and never written down, and a count, which it clears the next day. After three from one network in a day, the next person there is offered the waiting list’s emailed link instead.
Emails ofsale sends to you or for your shop go through Amazon's email service (Amazon SES).
Signing in
When you sign in to a shop, it sets one cookie, ofsale_shops, on ofsale.app. It holds the short names of the shops you signed in to on that device, at most five, and nothing about you. It lasts 400 days. Sign in on ofsale.app reads it to take you straight to your own shop.
If you type your email at Sign in, the hub passes it to each shop it may sign you in to: a Solo shop whose owner gave that email, found by its fingerprint, and each store on ofsale. Each shop that has an account with that email sends you its own sign-in link; a shop that has none sends nothing. Either way a shop keeps only a fingerprint of the address, in memory for an hour, to limit how often it is asked. To limit how often an address can be asked about, the hub keeps the fingerprint of what you typed for a day. After that it keeps only whether the shops answered.
A store's own records
Each store on ofsale runs its own copy of ofsale, with its own database. Its pieces, sales, customers, vendors and staff are kept there, for that store, apart from every other store's.
When a store takes cards, the card details go to the store's payment company, not to ofsale.
Photos and AI
Stores use AI to identify pieces, read paperwork and draft listings. Before a photo leaves a store's system, ofsale looks for faces in it and blurs each one it finds, and removes the details the camera stored with it, such as where it was taken. A photo it can't check for faces isn't sent.
One exception, where a store turns it on: to keep a piece's own face sharp in its photos, such as a face painted on a print or a figurine's head, ofsale shows that one face, as it is, to ofsale's own computer, which tells it from a person's. It goes nowhere else, and no face goes to an outside AI service.
Which AI services a store uses is that store's choice. Inside ofsale, the “AI and your data” sheet names each one and its terms.
Shopping at a store that uses ofsale
Each store's website has its own Privacy page, at /privacy on that site. It is made from the store's own settings, so it names everything that store's site collects and every service it uses.
Changes and questions
When what ofsale collects changes, this page changes with it, and the date at the top says when. Questions go to support@ofsale.app.