Privacy Policy
Last updated 16 September 2026.
This describes, in plain terms, what Boneyard Exchange actually collects and does with your information, based on how the site is built. It's provided as general information, not legal advice — if you have specific privacy concerns, you should seek independent legal advice.
What we collect
- Account details — if you create an account, we store your email address and an encrypted password (handled by our authentication provider, Supabase — we never see your password in plain text).
- Listing content — whatever you enter when posting a listing: title, description, price, location, category, photos, and the contact details you choose to show buyers (name, email and/or phone).
- Enquiry messages — if you contact a seller through a listing's enquiry form, we pass your message and the contact details you provide to that seller.
- Payment information — handled entirely by Stripe when you pay a listing fee or subscription. We never receive or store your card number — only confirmation that a payment succeeded, and basic billing metadata (amount, tier, subscription status).
- Technical data — a random, unguessable "owner token" stored in your browser so you can manage a listing you posted without an account. This isn't linked to your identity beyond that browser.
What we don't do
- We don't run advertising trackers, analytics pixels, or sell your data to third parties.
- We don't see or store your payment card details — that's handled entirely within Stripe's own secure systems.
Who your information is shared with
- Other users — the contact details and content you put on a public listing are visible to anyone browsing the site, by design, so buyers can reach you.
- Stripe — processes payments for listing fees and subscriptions under its own privacy policy.
- Supabase — hosts our database, file storage and account authentication.
- Vercel — hosts and serves the website itself.
We don't share your information with anyone beyond what's needed to run the site and process payments.
Your choices
- You can edit or delete your own listings at any time from "My listings."
- Deleting a hire/service listing also cancels its subscription automatically.
- To close an account, request deletion of your data, or ask what we hold about you, email enquiries@boneyardexchange.com.au and we'll action it.
Children
Boneyard Exchange is a business-to-business equipment marketplace and isn't directed at, or intended for use by, children.
Changes to this policy
If this policy changes, we'll update the date at the top of this page. Continuing to use the site after a change means you accept the updated policy.
Contact
Questions about this policy or your data — email enquiries@boneyardexchange.com.au.