Privacy Policy

Kwibal ("Kwibal", "we", "us", or "our") operates the website at https://kwibal.com and the services offered through it (together, the "Service"). This policy explains what information we collect, how we use it, and the choices you have. Questions any time: info@kwibal.com.

The short version: we collect information needed to run local secondhand shopping with delivery and detailed first-party product analytics that help us understand visits, sessions, marketing performance, and how people use Kwibal. We don't sell your personal information or use this information to track your browsing on other companies' sites. You can opt out of product analytics at any time using the control below.

1. Information We Collect

Account information. When you create an account we collect your name, email address, and a password (stored only as a secure hash). If you sign in with Google, we receive your name, email address, and profile picture from Google instead of a password. We also keep email-verification status and short-lived, one-time records used to verify your email or reset a password; the secret value sent in an action link is not stored in recoverable form.

Profile and delivery details. Your display name, phone number, and the delivery address you submit. We derive a delivery location only from that submitted address, converting it to map coordinates so we can calculate delivery eligibility and costs.

Delivery quotes before sign-in. If you check a delivered price before creating or signing in to an account, we verify the address without saving it to an account. The address text you entered is kept in an encrypted, HttpOnly, short-lived browser-session cookie so the quote can continue through sign-in. Temporary verification coordinates are used only for the current request and are not retained; we verify the address again after sign-in. Browser scripts cannot read that cookie, and checkout separately verifies any address you choose to save. To limit automated use of the quote service, we temporarily group requests by a keyed, non-reversible value derived from the request's network address; the quote limiter does not retain the raw address.

Location during search. With your permission, your browser shares precise coordinates so we can show items available near you. Device geolocation remains in the active browser session and is not saved as your local or account shopping preference. You may instead enter a city or ZIP; we send that text to our server to resolve an approximate shopping area. The resolved city or ZIP may be saved on your device and, when you are signed in, with your account for future browsing. On an initial visit, we may use your network address transiently to infer a coarse city for browsing. That inferred area is not remembered as a shopping preference, and we do not save the raw network address for the inference. Normal security and server logs may still contain an IP address, and request logs may contain coordinates you send with a nearby-item request. Search locations do not become a delivery address; we verify the delivery address you separately submit.

Anonymous search access. If you are not signed in, a first-party cookie stores an opaque marker tied to that browser's available keyword-search journey; it does not store the keyword itself. This lets you refine, retry, and continue the same search while asking you to create an account or sign in before starting a different keyword search. The cookie is browser-specific, can be removed by clearing site cookies, and is not used to verify a person's identity. Nearby browsing and the Free Pile do not use this allowance.

Orders and offers. The items you order or make offers on, the prices involved, delivery quotes, and order status history. When an order follows a search, we may also keep opaque search and attempt identifiers with the order so we can measure whether search led to a successful purchase. Those identifiers do not contain the search text or location.

Order issue cases. If you report a delivery or item issue, we keep the issue category, your description and responses, buyer-visible updates, and the case's status history. Authorized Kwibal team members may also add internal review notes, which are kept separate from the updates shown to you. We use this information to investigate the report, communicate with you, and resolve the case.

Saved activity. If you use account saves, we keep the item identifiers, search terms, category, selected search area, and alert preferences you choose. If you explicitly save a search while using device location, its selected area is stored with that saved search; this is separate from your remembered shopping preference. Recently viewed items are convenience history stored only in your browser for up to 30 days, not in your Kwibal account. You can clear that history from your account page at any time.

Payment information. Payments are processed by Stripe, our payment processor. Your card number is entered directly with Stripe and never touches Kwibal's servers; we store only a payment reference and the status of the authorization or charge.

Forms. If you ask about partnering or contact us, we keep what you submit: name, email, company, and message. Kwibal previously collected early-access email and ZIP information. Any legacy records remain covered by this policy and by the deletion choices below.

Product and web analytics. Unless you opt out, we use PostHog to understand how the Service is found and used. PostHog assigns a persistent pseudonymous browser identifier and creates an anonymous visitor profile before sign-in. If you sign in, we associate that journey with your internal Kwibal account ID. Browser analytics is sent through a first-party path on Kwibal and then forwarded to PostHog. Kwibal authentication cookies, authorization headers, and the browser's full referrer header are removed at that forwarding boundary. We collect page views and page exits; session timing; sanitized page paths and referring pages; standard campaign parameters such as UTM values and advertising click identifiers; browser, device, operating-system, viewport, language, and similar technical context; and coarse geographic information derived from the network connection. We also collect the product actions you take, including searches, result clicks, item views, saves, checkout steps, selected filters, result counts and outcomes, and opaque item, search, and order identifiers.

PostHog automatically records clicks and form submissions on links, buttons, and forms, but not form-field changes or the value typed into a field. We use click, movement, and scroll patterns to generate heatmaps and detect dead or repeated clicks. We collect scroll depth, browser performance and Web Vitals, limited network timing, and browser exceptions such as unhandled errors and rejected promises. Network request and response headers and bodies are not collected, and console logs are not recorded.

Session replay. On buyer-facing pages that do not contain sensitive account or transaction information, PostHog may create a visual replay of the page and your interactions, including pointer movement and scrolling. Every input, selection, and text-area value is masked. Visible replay text is filtered for contact information, street addresses, coordinates, ZIP codes, and similar sensitive patterns. Replay is blocked on administrative, checkout, order, account, sign-in, signup, password, and verification pages, and designated sensitive page elements are not recorded. Cross-origin frames, canvas contents, custom fonts, console logs, and network headers and bodies are not included.

Search text and other application-authored analytics properties are normalized and filtered for common email addresses, phone numbers, web addresses, street addresses, precise coordinates, ZIP codes, and long numbers before they are sent. We do not intentionally send PostHog passwords, card or payment credentials, exact delivery addresses, precise device location, seller contact details, sensitive administrative content, form input values, or your name, email address, or phone number as analytics properties. Page and network URLs are stripped of query strings, fragments, credentials, and dynamic identifiers; allowed campaign parameters are stored separately for attribution.

First-party campaign links. Kwibal may use an opaque link on an advertisement, email, creator post, or item post to understand which outreach led to a visit or order. The public link does not name the channel or person. After it redirects to Kwibal, and only when product analytics is allowed, the browser confirms a pseudonymous landing with PostHog and keeps an encrypted attribution receipt for up to 30 days. The receipt contains no contact information, search text, precise location, external URL, or seller contact details. When we compare two Kwibal page experiences, it may also contain an opaque test identifier and a control or treatment assignment, but not the test name or message. A campaign link to a registered Kwibal landing page may also retain that page's non-personal identifier so its later conversion can be measured. A later Kwibal campaign link replaces the earlier receipt. We may map the campaign's internal channel and placement to standard attribution fields in PostHog so visits, sessions, orders, and captured value can be analyzed together, and use aggregate first-party records to measure account creation. We do not install advertising-platform pixels or use this data to track browsing on other sites.

Usage and log data. Like most websites, our servers record request logs (IP address, browser type, pages requested, timestamps) used for security and debugging. These operational logs are separate from the product analytics described above.

2. How We Use Information

• To provide the Service: show items near you, price delivery, process orders, verify them, and deliver them.
• To operate your account and keep it secure.
• To remember your saved items and searches and send new-match alerts you enable.
• To communicate with you about account verification or recovery, orders, order issue cases, and Service updates you have asked to receive.
• To prevent fraud and abuse and to comply with legal obligations.
• To understand search demand, result quality, and conversion journeys; find features that are confusing, slow, or unsuccessful; measure marketing performance; reproduce buyer-facing usability problems; and improve the Service using pseudonymous and aggregate usage data.

3. How We Share Information

We do not sell your personal information. We share it only with:

• Service providers who process it on our behalf and only as needed to run the Service: payment processing (Stripe), address geocoding and route calculation (Mapbox), cloud hosting and backups (Amazon Web Services), transactional email (Resend), signup protection (Cloudflare Turnstile), product and web analytics (PostHog), and sign-in (Google, only if you choose Google sign-in).
• Delivery personnel, who receive your name, phone number, delivery address, and order details needed to complete your delivery.
• Legal authorities, if required by law, subpoena, or to protect the rights, safety, or property of Kwibal or others.
• A successor business, if Kwibal is involved in a merger, acquisition, or sale of assets; this policy would continue to apply to your information.

4. Cookies

We use a small number of cookies and local browser storage for authentication, security, anonymous keyword-search access, a city or ZIP shopping area you explicitly choose, recently viewed items, essential interface preferences, and—unless you opt out—a random first-party analytics identifier that recognizes the same browser over time and an encrypted, first-party campaign receipt that expires after 30 days. PostHog analytics is limited to Kwibal and is not used for cross-site advertising. We do not use advertising cookies or cross-site advertising trackers. The analytics control below is the supported browser choice; a browser's general Do Not Track signal does not change that setting.

5. Data Retention

We keep your information while your account is active or while we need it to provide the Service, comply with legal obligations (for example, payment records), resolve disputes, and enforce agreements. Legacy early-access records are kept only as long as needed for those purposes or until an applicable deletion request is fulfilled. Saved items and searches remain until you remove them or the account is deleted; an account shopping area remains until you replace it or the account is deleted, subject to legal retention obligations. Device-local viewing history expires after 30 days or sooner when you clear it. Product-analytics events are retained only while they are reasonably needed to understand and improve the Service; we periodically review and delete or aggregate older analytics data. Aggregate findings that no longer identify a browser or account may be kept longer. The anonymous-search marker expires after the configured search-journey period—365 days by default—or sooner if you clear site cookies. First-party campaign receipts expire after 30 days and are removed sooner when you opt out, sign out, switch accounts, or clear browser storage. An order made while analytics was allowed retains its opaque campaign snapshot with the order so later order outcomes use the same conversion dimensions.

6. Security

We protect your information with industry-standard measures: encryption in transit (HTTPS everywhere), hashed passwords, HttpOnly session cookies, and access limited to people who need it to operate the Service. No method of storage or transmission is 100% secure, but we work to protect your information appropriately.

7. Your Choices and Rights

• Access and update. Your profile and delivery address are editable in your account.
• Deletion. Email info@kwibal.com to request deletion of your account and personal information. We may retain records we are legally required to keep (such as payment records).
• Email choices. You can turn off each saved-search alert from your account. Optional updates include an opt-out, and we honor requests sent to info@kwibal.com. Security and order emails are transactional rather than marketing.
• Location. Revoke the browser's location permission at any time; search still works with a manually chosen city or ZIP. Device location is not your remembered shopping preference.
• Product analytics. Use the analytics control below to opt out at any time. Opting out stops new analytics events and session replay from that browser and resets its analytics identity, search attribution, and campaign receipt. You can opt back in later. If an order was created while analytics were allowed, later status events for that existing order may still be recorded; the browser choice is applied to new orders and offers. Opting out does not delete information already collected. You may email info@kwibal.com to request access to or deletion of analytics associated with your account. If you have never signed in, we may need the exact anonymous analytics identifier from your browser to locate that data.

8. California Privacy Rights

Kwibal is based in California. If you are a California resident, you have the right to know the categories of personal information we collect (they are listed in section 1), to request access to or deletion of your personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act. To exercise any of these rights, email info@kwibal.com.

9. Children

The Service is intended for adults. It is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy as the Service evolves. We will post the revised version here with an updated date, and for material changes we will take reasonable steps to notify you (such as email or a notice on the site). Continued use of the Service after changes take effect means you accept the revised policy.

11. Contact Us

Email: info@kwibal.com

Mail: KWIBAL, PO Box 2212, Huntington Beach, CA 92647