Privacy Policy

This policy explains what data RiskyToys collects, how it is used, and what choices you have regarding your information.

LAST UPDATED: August 20, 2026

Information We Collect

We collect account details you provide, including email, name, and profile information used for authentication and account management.

When you create listings, we store titles, descriptions, photos, and approximate location (city, state, and coordinates you select — not GPS from your device).

Marketplace activity such as saved listings, comments, buyer/seller messages, listing views, and checkout records is stored to provide core product features.

If you enable notifications, we store a push token and basic device metadata (platform, app version) to deliver alerts.

If Meta advertising measurement is enabled, we collect product interactions, registration and purchase events, Meta browser identifiers (_fbp and _fbc), ad-click attribution, IP address and user agent, device advertising identifiers where permitted, and a one-way SHA-256 hash of your email and account identifier for matching. We do not send message contents, card details, or a listing's asking price as purchase revenue.

How We Use Data

Data is used to operate search, saved listings, seller tools, messaging, moderation workflows, payments, and support operations.

We may use aggregated and de-identified usage patterns to improve marketplace quality, discover issues, and prioritize features.

With the consent or notice required for your region, we use Meta Pixel, Conversions API, and Meta App Events to measure advertising, attribute registrations and purchases, diagnose conversion funnels, and build advertising audiences.

Service Providers

We use trusted service providers to run the platform. They process data only on our behalf:

Supabase — authentication, database, file storage, and backend services.

Stripe — listing tier checkout on web and Android (payment processing; we do not receive your card number).

Apple — Sign In and in-app purchases on iOS.

Google — optional OAuth sign-in.

Mapbox — city and locality search when you set a listing location.

Expo — push notification delivery and over-the-air app updates.

Resend — transactional emails such as seller contact notifications and checkout receipts (sent from our servers).

Meta — advertising measurement and attribution through Meta Pixel, Conversions API, and App Events when enabled by your privacy choice and, on iOS, Apple App Tracking Transparency permission.

Data Sharing

We do not sell personal data. When advertising measurement is enabled, the identifiers and events described above are disclosed to Meta for advertising measurement and attribution. Other information is shared only with the service providers listed above as needed to operate the app.

When required by law, we may disclose limited information in response to valid legal requests.

Retention and Your Choices

We retain data for operational, security, and legal compliance purposes, then remove or anonymize records when no longer required.

Meta browser identifiers generally persist for up to 90 days. We retain server conversion records and consent evidence only as long as reasonably needed for attribution, auditing, security, and legal obligations; direct IP address and user-agent fields are removed after successful server delivery.

You can allow or decline Meta advertising measurement at any time from Your Privacy Choices without signing in. Withdrawing consent stops future collection and removes RiskyToys' Meta browser cookies where supported. Browser Global Privacy Control is honored as an opt-out. iOS advertising identifiers also remain controlled by Apple Settings.

You can delete your account from the app, which removes your auth account and associated data from our systems.

For privacy requests, account questions, or data access inquiries, contact support@riskytoys.com from the email associated with your account.