Cookie policy

A cookie is a small file a website stores in your browser to remember something between one page and the next: that you are signed in, which language you want to read in, or how many searches you have run. Alongside cookies there are equivalent technologies (browser local storage), and everything said here applies to them too.

Every cookie we set is what the law calls 'strictly necessary': without it the service you asked for cannot be provided. These are all of them:

• Session (authentication). Keeps you signed in between pages and on later visits so you don't have to type your password every time. Deleted when you sign out. Lifetime: until you sign out or the session expires.
• Language. Remembers which language you want BuyHub in — exactly what you chose when you switched it. Lifetime: the browser session, or until you change it.
• Visitor identifier for signed-out users. A random identifier, with no name or personal data attached, used for two things: applying the free search quota for people without an account, and preventing the service from being automated and used as a data-extraction relay. Lifetime: 1 year, with the quota renewing every 24 hours.

We do not use Google Analytics or any other analytics tool, we have no advertising, there are no social-network pixels, and we do not build profiles from what you search to sell to anyone.

European electronic-communications rules require prior consent before storing information on your device, except when that information is essential to provide a service you have expressly requested. The three cookies above fall under that exception: authentication, the language preference you set yourself, and a security and quota-control measure.

That exception rests on what the cookies DO, not on what we write here. If we ever add analytics, advertising or any non-essential cookie, we will ask for your consent before installing it and this page will say so.

This is the most important part of this page, and it is worth reading in full.

BuyHub searches third-party marketplaces (eBay, Vinted, Wallapop and many others). Depending on the case, the search is run by our server or by your own browser — but when we show you the results, your browser requests the listing PHOTOGRAPHS directly from that marketplace's servers. That means the marketplace:

• receives your IP address and your browser's technical details;
• knows that specific image was requested, and from which page;
• may set its own cookies in your browser, if its server decides to.

Those cookies are theirs, not ours: we do not set them, we cannot read them, and we receive nothing of what they collect through them. They are governed by each marketplace's own cookie and privacy policy, which is where you can review them and exercise your rights against them.

If you would rather not be exposed to this, almost every browser lets you block third-party cookies; section 6 explains how. BuyHub still works with them blocked.

When you open a listing on the marketplace's own site, when you link a marketplace account to BuyHub, or when you use our browser extension, you are browsing that site with your own session: their cookies and their policies apply there exactly as if you had gone in directly.

Payments. If you take out a paid plan, Paddle handles the charge as merchant of record. Their payment form loads only at the moment you open the checkout — not before, and not anywhere else on the site — and may set its own cookies, needed to complete and secure the transaction you requested. See Paddle's policy for details.

Hosting and security. Our infrastructure provider may use technical cookies for security and load balancing, without which the site cannot be served reliably.

Signing in with Google or Apple. Only if you choose that method: when you tap it, the provider handles identification with its own cookies inside its own window.

You can delete the cookies you already have and block future ones from your browser settings. You can also block third-party cookies specifically, which is what affects section 4:

• Chrome: Settings › Privacy and security › Third-party cookies.
• Safari: Settings › Safari › Prevent cross-site tracking.
• Firefox: Settings › Privacy & Security › Tracking protection.
• Edge: Settings › Cookies and site permissions.

Bear in mind that blocking session cookies means you cannot stay signed in, and deleting the visitor identifier resets the free search quota.

The mobile app does not use cookies for its own operation: it keeps your session in the operating system's secure store. It does open embedded browser windows when you enter a marketplace or link an account, and that marketplace's cookies apply inside those windows.

The browser extension works with the session you already have open on each marketplace, in your own browser. It does not copy or send those cookies to our servers: it uses them where they already were, so the marketplace recognises you.

If we change the cookies we use, we will update this page and its date. Any change involving non-essential cookies will come with the corresponding consent request.

For any question about this policy you can write to us at contact@museum.app. Controller: Museum App Inc., 5900 Balcones Drive Ste 100, Austin, TX 78731, United States.