Privacy and contact

When you sign in, we store your email, verification status and the identity needed to recognize your account. Your Auction Arrows password is stored as a salted, one-way hash rather than readable text. Sign-in uses an emailed code and your password. Accounts previously connected through Google keep the same email and identity; we do not receive your Google password.

Your saved auctions, searches and preferences belong to your account. They are not a public profile. Signing in does not subscribe you to marketing email.

Information you submit in a listing, including the auctioneer contact details, can appear publicly after approval. Drafts and pending changes stay private to their owner and authorized staff. Photos and sale bills are deleted 48 hours after the auction day ends; the listing text stays in the seller’s account as a record of the past auction.

Stripe handles card entry on its checkout page when payments are enabled. Auction Arrows keeps the amount, currency, payment reference and status needed to manage your listing. Payment submits a listing for review; it does not automatically publish it. A refund-required status records follow-up work, not a completed refund.

Auction alerts require your request and email confirmation. Use your verified account’s email-alert controls or the unsubscribe link in an alert email to stop alerts. Your chosen sale types, area and delivery timing determine which alerts you receive.

Sign-in codes, listing recovery and moderation updates are service messages. An optional verified management email stays private and can receive listing updates and recovery links; adding it does not subscribe you to alerts. Our email delivery service, Brevo, sends these messages and alerts. The application records delivery outcomes and retries only when it is safe to do so. An uncertain send result is held for review to avoid duplicate messages.

Listing, review and payment help

The app uses your email address and account and sign-in provider identifiers to authenticate you. Supported saved auctions, searches (including chosen ZIP-based area and radius), followed auctioneers and email-alert choices sync with your account. Sign-in and registration events record the account, method, app or website and time. Email alerts require consent and confirmation and can be stopped in your account or through an unsubscribe link.

Device notes, Going plans, recent views and device reminders stay on your device. Reminders use Apple's local notifications with your permission. When you enable phone alerts, the app sends an Apple push device token, installation identifier and delivery environment to Auction Arrows, linked to your account. We use these to deliver requested auction updates through Apple Push Notification service and to manage your device choice. Account notification preferences, per-search and auctioneer rules, inbox entries and read state, and connected reminder schedules are stored with your account. Phone notification permission is requested when you enable alerts, never on first launch. You can turn off this phone in Phone alerts or change permission in iPhone Settings. Turning off the phone clears its registered token; signing out revokes session tokens and account deletion removes member push data. Raw device tokens are not included in account exports. Inbox entries are shown for up to 90 days, limited to 500 entries. Delivery uncertainty may be retained for review to avoid duplicate messages. Email fallback requires a separately confirmed email-alert subscription. The app does not upload optional usage analytics or crash diagnostics in this release. The website service retains limited error references and route/error categories for troubleshooting without account identifiers or request contents.

When you enter a ZIP code, the app sends it to Zippopotam.us to find the area's coordinates. Chosen area criteria are sent to Auction Arrows when browsing by area or saving an account search. If you tap the map's location control, iOS asks for permission to show your current position. That location fix is used on the map, is not saved to your account and is cleared when location use stops. No background location is requested.

The website, sign-in, email delivery, Apple push, ZIP lookup and Apple map services process the requests needed for those features. Website pages opened from the app follow the website storage and analytics choices described below. Account deletion does not erase device notes and plans; use Privacy & data to erase device data separately.

The hosted application uses Cloudflare services for the site, records and uploaded media. A browser cookie keeps your session signed in. The listing builder also uses browser storage to preserve your work and preferences.

Basic site usage analytics start off and require an affirmative choice in this browser. If you allow them, Auction Arrows stores a persistent random browser identifier and records limited first-party events such as homepage, listing and preview views and selected auction interactions. The analytics event does not include form entries, email addresses, full page URLs or management links. Because a persistent browser identifier is used, this tracking is not fully anonymous.

On public pages, an additional explicit choice enables Google Analytics when it is configured for Auction Arrows. Google receives public page paths, approved campaign labels, referral site origins and selected listing interactions, together with browser and approximate location information. Google Analytics uses cookies with random identifiers. We do not send form entries, email addresses, private account or payment pages, management links, URL fragments or arbitrary query strings to Google. Advertising personalization and Google signals are disabled. Earlier permission for first-party analytics alone does not activate Google Analytics. How Google uses this information.

Choosing No thanks is remembered when browser storage is available. Withdrawing permission removes the analytics browser identifier from this browser and stops new analytics work on the open page. If browser storage is unavailable, analytics stay off.

You can remove saved auctions and searches, clear saved seller details, sign out, and unsubscribe from alerts. A verified account can download records or submit an access, correction or deletion request. Guest listing requests and payment questions can be verified with the site operator. Listing and payment history may need review before records can be removed.

When account deletion is enabled, a verified member can delete their account from the Account page. Deletion revokes access, removes listings from public view, and removes private account data and uploaded file contents. Payment and refund audit records, email suppression records, minimal deletion evidence, and empty upload safety markers are retained. If you used a first-listing promo code, a one-way code made from your email stays with that payment record so the offer can’t be claimed again. A deletion receipt shows pending or completed status; completion follows confirmed file removal. Deletion does not request or cancel a refund. Other privacy requests remain available for support review.

Email contact@auctionarrows.com for privacy help. See Support for app and account help.