Privacy

Last updated: November 15, 2026

This explains what One Shot Lot keeps about you, why, and who else sees it. One Shot Lot is run by [operator legal name], [mailing address]. Questions: ngd85332@gmail.com or the Help page.

If you buy

• Your email, name and shipping address, what you bought and what you paid. The seller you bought from sees your name, email and shipping address so they can ship and contact you about the order.
• Card details go straight into Stripe's payment form and to Stripe. One Shot Lot never sees or stores your card number. On test payments only the card brand and last 4 digits are kept.
• If you ask for a pile link, we use your email to send it. Opening the link signs this browser in to your piles for 30 days with a cookie (osl_buyer).

If you sell

• Your email (to sign in with a one-time code), shop name, web address, bio, profile photo and shipping settings.
• Your batch photos, item squares, close-ups, titles, prices and notes. The photo you take stays private; buyers see a copy with location and camera details removed.
• Price recordings and their transcripts. These stay private to you.
• Your Stripe account ID and whether it can take payments. Stripe handles identity checks and payouts and keeps that information itself.

If you browse and search

• Picks for you are worked out from what you open, save, follow and search. That record stays on your phone (or in this browser). It is sent with each request for the home feed so the server can rank listings, and it is not stored on our side or tied to you. You can clear it in the app (Account, Picks for you, Start over) or by clearing this site's data in your browser.
• Saved items and shops you follow are kept only on your phone. Searches are used to answer them and are not stored with anything about you.
• To show items that look alike, we make a small color and texture summary of each item photo. It describes the item, not you.

Reports and help messages

When you report a listing or write to us, we keep the message and the email you give us, if any. To spot repeat reports we keep a scrambled (keyed hash) form of your account ID or IP address, not the address itself.

Services that process data for us

• Stripe: payments, refunds, seller identity checks and payouts.
• Vercel: hosts the website and stores photos and recordings.
• Neon: the database.
• Resend: sends sign-in codes, receipts and pile links by email.
• Anthropic: only for sellers who allow it. A smaller copy of the batch photo, to suggest item squares, and the text of a price recording, to read the prices.
• Deepgram: only when switched on and allowed by the seller. Price recordings, to turn speech into text.

Each of these services may use the data only to provide its service to us, and must protect it at least as well as this policy does. We do not sell personal data, we do not track you across other apps or websites, and there are no advertising or tracking scripts in the app or on this site.

Cookies and this browser

• osl_session: keeps a seller signed in (up to 90 days from last use).
• osl_buyer: after a pile link, lets this browser see your piles (30 days).
• This browser's own storage keeps links to your orders and piles, so you can find your receipt and add to your pile, and whether you closed the app invitation. It stays on your device; a link is only sent to us when you open it or add to a pile.
• On checkout, Stripe sets its own cookies to prevent fraud.

How long we keep it

• Sign-in codes: deleted after a day. Sign-ins: end after 90 days without use, or when you sign out.
• Rate-limit records (scrambled IP or email): about two days.
• When a seller deletes their account: batches, items, photos, recordings and sign-ins are deleted. Orders and refunds are kept as financial records for 7 years.
• Buyer details on orders are kept for the same period, then deleted. To have them deleted sooner where the law allows, write to ngd85332@gmail.com or use the Help page.

Your choices

• Sellers can turn AI help off at any time in settings and type everything instead. Turning it off withdraws that permission.
• Sellers can delete their account from their account settings.
• Anyone can ask what we hold about them, or ask for it to be corrected or deleted, through the Help page.

Children

One Shot Lot is not meant for children under 18.