Privacy
We do not know who you are
There are no accounts here, no sign-in, no advertising, and no tracking cookies. We store no search, view or tap with anything that identifies you. The exceptions, both below: our host’s logs and a count kept to stop floods.
What gets recorded
Three things, and each one is a row with no identifier in it:
- A search. The words you typed, the zip code if you gave one, the neighborhood or category if you narrowed, how many results came back, and the time.
- A tap through to a shop. Which shop or item you were leaving for, and the full address of the page you left, with any search words or zip code in it.
- An item page view. Which item, which shop, and the page that sent you there: the full address if it was one of ours, with any search words or zip code in it, or only the site’s name if it was another site.
No IP address, no device fingerprint, no cookie, no visitor number. From these rows we cannot tell one person from another, join two searches together, or work out that the person who searched for boots is the person who later opened a bakery. That is not a promise about how we behave, it is a fact about what the rows contain.
We keep these to learn what people look for and do not find, so the missing shop is the next one we go and add, and to show a shop owner how often their items were viewed and tapped through to their store.
One more record does involve your connection, and it is kept apart from the three above. To stop floods, the server counts messages, claims, item page views, search suggestions and changes to a shared list per connection for an hour, filed under a key made by hashing the connection’s IP address with the day. The key is never joined to a search, a click, a view or a message, and it is deleted once it is a day old, the next time anyone on the site does one of those things. The hash mixes in a secret that our server holds, so the table on its own cannot be worked back to an IP address, even by trying every one there is.
Three kinds of row do carry something of yours, because you made them on purpose. A message you send from the contact page: the message, the reply address if you gave one, and which listing or page it was about. The message row keeps nothing about the connection it came from. Ask in a second message and we delete the first from our database by hand. A copy was emailed to us through Resend, which sends our mail and keeps its own record under its own rules.
A claim from a shop’s page: which shop, and the email you gave, mailed to us the same way, so a person can write back to check it is yours.
And a list you choose to share: its title, the date if you set one, the items and your notes, so the link works for the people you send it to, with any hold a friend puts on an item, under a code their browser reuses. A shared list nobody has changed for 180 days is deleted; opening it does not count.
Cookies
One, and it is not for shoppers: it lets us reopen our own statistics page without its key sitting in the address bar. If you are here to shop, this site sets no cookie. What you save, and the short list of your recent searches, are kept in your own browser, and clearing this site’s data removes them. A saved list is stored with us only if you share it.
Other companies your browser talks to
We use no advertising network. These other hosts are involved in loading a page, and each one sees your IP address the way any web request does:
- Google Fonts serves the typefaces (fonts.googleapis.com and fonts.gstatic.com).
- Each shop’s own image host serves its photos and logo, straight from the shop’s site or store.
- Vercel hosts the site and keeps the ordinary server logs any host keeps, which hold each page’s full address, search words included, and your IP address.
- Vercel also measures how fast each page loads and answers a tap (Vercel Speed Insights). The measurement holds the timings, which part of the page was slow, your connection’s speed class (such as “4g”), and the page’s address cut before any question mark, so none of your search words; for a shared list, only that it was a shared list, never which one. Vercel files these by country and kind of device, which any request shows, and keeps them under its own rules. It sets no cookie and stores nothing in your browser. If your browser sends Global Privacy Control, Speed Insights never loads.
Supabase stores our data. Your browser never talks to it: our server does, so it sees our server’s address, not yours.
Every “buy” link takes you to the shop’s own store, and what happens there is between you and them.
Where the shop information comes from
Names, addresses, opening hours and trades come from OpenStreetMap, used under the Open Database License. Neighborhood boundaries come from the Seattle City Clerk’s Neighborhood Map Atlas. Product titles, descriptions, prices and photographs are synced from each shop’s own online store and belong to the shop.
Getting a listing changed or removed
To correct a listing or have it taken down, use the contact page, which every shop page links to. A listing comes down within a day. You do not have to explain why, and it stays down: we hide the listing and its items rather than delete them, so the next import from OpenStreetMap does not put it back.
Last changed 30 September 2026. If this page ever stops describing what the site does, the site is wrong, not the page: tell us and we will fix it.