Legal
Updated in repo
Last Updated: January 25, 2026
This Privacy Policy describes how FeralBase Collective ("we," "us," or "FeralBase") collects, uses, and shares information when you use auction.feralbase.com (the "Platform"). The Platform is operated by Bahar Labs. Auction proceeds support animal rescue activities.
When you create an account, place bids, or list items, we collect your email address, display name, and account credentials (stored as secure hashes, never plain text). If you win an auction, we collect your shipping address to coordinate delivery. We do not store payment card numbers; all payment processing is handled by Stripe.
We use Umami for privacy-friendly, cookieless analytics. This collects anonymized usage data such as page views and general traffic patterns. We do not track individual users across sessions or websites. Server logs may temporarily record IP addresses and browser information for security and debugging purposes.
We receive transaction confirmations from Stripe (our payment processor) but never receive or store your full payment card details.
We use your information to operate the auction platform (process bids, coordinate shipping, communicate about auctions), send transactional messages via email and SMS through Resend (bid confirmations, win notifications, shipping updates), improve the Platform based on anonymized analytics, comply with legal obligations, and prevent fraud and abuse.
We use AI to help generate item descriptions and extract information from uploaded photos. Sellers review and approve all AI-generated content before publication. For details, see our How We Use AI page at auction.feralbase.com/ai.
We share information with service providers who help us operate the Platform. These include Supabase (database hosting, SOC 2 Type II certified), Stripe (payment processing, PCI DSS Level 1 certified), Vercel (web hosting, SOC 2 Type II certified), Umami (anonymized analytics, self-hosted), and Resend (transactional email and SMS). We may also share information when required by law or to protect our rights. We do not sell your personal information.
You can access, update, or delete your account information through your account settings. To request a copy of your data or ask us to delete it, email privacy@feralbase.org. We will respond within 30 days. You can opt out of marketing emails using the unsubscribe link in any message. Transactional messages (bid confirmations, win notifications) cannot be opted out while you have an active account.
If you provide a phone number and consent to SMS communications, we will send you transactional messages related to your auction activity (bid confirmations, outbid alerts, win notifications). Message frequency varies based on your activity. Message and data rates may apply. You can opt out of SMS at any time by replying STOP to any message or updating your communication preferences in account settings. For help, reply HELP or contact privacy@feralbase.org.
We retain your account information until you request deletion, plus 30 days for processing. Inactive accounts (no activity for 3 years) may be deleted. Bid history and payment references are retained for 7 years for record-keeping and tax purposes. Shipping addresses are deleted 90 days after delivery confirmation. Server logs are deleted on a 30-day rolling basis.
We use industry-standard security measures including encrypted connections (HTTPS), secure password hashing, and access controls. Our service providers maintain SOC 2 and PCI DSS certifications as appropriate for their services.
The Platform is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
We may update this policy from time to time. We will post changes on this page and update the "Last Updated" date. For significant changes, we will notify you by email.
Questions about this policy or your data? Contact us at privacy@feralbase.org.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Identifiers (email address, display name, IP address), commercial information (bidding history, purchases), internet activity (anonymized usage data via Umami), and geolocation (general location inferred from IP, not precise location).
You have the right to know what personal information we collect, use, and share. You have the right to delete your personal information, subject to certain exceptions. You have the right to correct inaccurate personal information. You have the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising. You have the right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by CPRA. You have the right to non-discrimination for exercising your privacy rights.
Submit requests to privacy@feralbase.org. We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
In the previous calendar year, we received 0 requests to know, 0 requests to delete, and 0 requests to opt out. We are not yet subject to CCPA threshold requirements but provide these rights voluntarily.
*FeralBase Collective is an animal rescue community. The auction platform is operated by Bahar Labs.*