Privacy Policy

This Privacy Policy explains how Dorian Smith LLC, doing business as SquishyTrade (“SquishyTrade,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use squishytrade.com and our related sites and features (the “Service”). By using the Service you agree to this Policy and to our Terms of Use.

The short version

• You can browse the Service, look up values, and read guides without an account and without giving us any personal information.
• The only personal information we collect directly is your email address, and only when you choose to sign up for an alert or the trading waitlist.
• We never sell your email or rent it to anyone. You can unsubscribe or ask us to delete it at any time.
• Like most sites, we use a hosting provider and show ads (Google), which involve server logs and cookies. You have controls and opt-outs — see below.
• The Service is for adults (18+). We do not knowingly collect data from children under 13.

1. Information we collect

Information you give us. The only personal information you provide directly is your email address, when you sign up for a price/availability alert or join the trading waitlist. At sign-up we also record your age affirmation (that you are 18+) and a timestamp, the specific item or list you asked about, and whether you confirmed your subscription. If you email us, we receive your message and email address.

Information collected automatically. Like virtually all websites, our infrastructure (Amazon Web Services / Amazon CloudFront) automatically logs basic technical data when you visit — your IP address, browser and device type, referring page, the pages you view, and timestamps. We use this for security, fraud and abuse prevention, troubleshooting, and aggregate analytics. We aim to use privacy-respecting, aggregate analytics and to minimize non-essential tracking.

Cookies and similar technologies. We use a small number of cookies and similar technologies that are strictly necessary to operate the Service (for example, security and basic functionality). Our advertising provider (see below) sets its own cookies and uses similar identifiers. We do not use cookies to build marketing profiles of you ourselves.

Future features. If we later add user accounts and a trading layer, we will collect what those features need (such as a username, profile details, trade history, reputation, reports, and any messages or chat you send). We never plan to process payments, so we do not collect or store payment-card or bank-account information. We will update this Policy before those features launch.

2. How we use information

• To send you the specific notifications you asked for (item alerts; trading-launch news) and the double opt-in confirmation;
• To operate, maintain, secure, and improve the Service;
• To prevent fraud, abuse, and unauthorized access, and to enforce our Terms;
• To show ads that help keep the Service free (see Section 4);
• To comply with law and respond to lawful requests.

3. How we share information

We do not sell or rent your email address. We share information only as follows:

• Service providers. Companies that run the Service on our behalf under contract — for example Amazon Web Services (hosting, database, content delivery) and Amazon SES (sending our confirmation and alert emails). They may process data only to provide their service to us.
• Advertising and analytics partners. See Section 4 — primarily Google, for the ads that fund the Service.
• Affiliate links. When you click an affiliate link to a marketplace (such as StockX or eBay), that marketplace and its affiliate network may set their own cookies and collect data under their own privacy policies so a commission can be attributed. We do not send them your email.
• Legal and safety. When we believe in good faith it is necessary to comply with law, enforce our Terms, or protect the rights, property, or safety of SquishyTrade, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

4. Advertising (Google AdSense)

We use third-party advertising — currently Google AdSense — to help keep the Service free. Third-party vendors, including Google, use cookies and similar technologies to serve ads based on your prior visits to this and other websites.

• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to the Service and/or other sites.
• You can opt out of personalized advertising by Google at Google Ads Settings. You can opt out of personalized advertising by many other vendors at aboutads.info/choices (US) or youronlinechoices.eu (EU/UK).
• We do not run behavioral ad targeting aimed at children, and the Service is not directed to children.

For more on how Google uses information from sites that use its services, see Google's “How Google uses information” page.

5. Double opt-in and your email choices

When you submit your email, we send a confirmation message and only add you to a list after you click the link in it (double opt-in). Every email we send includes a one-click unsubscribe link and standard List-Unsubscribe headers, and we honor unsubscribes promptly. We use your email solely for the alerts you requested — not for unrelated marketing.

6. Your rights and choices

Wherever you live, you can: unsubscribe from any email using its link; ask us what data we hold about you; ask us to correct it; and ask us to delete it. Because email is essentially the only personal data we hold — isolated in a single dedicated store keyed by a one-way hash of your address — a deletion request is a clean, complete operation. To exercise any right, email privacy@squishytrade.com; we may need to verify your request by confirming control of the email address.

California residents (CCPA/CPRA). In the past 12 months we have collected the categories “identifiers” (email, IP address) and “internet activity” (basic usage/log data). We collect these to provide and secure the Service and to show ads, as described above. We do not sell your personal information for money. However, the use of third-party advertising cookies (Section 4) may be considered a “sale” or “sharing” under California law. You have the right to know, access, correct, and delete your personal information, to opt out of any such sale/sharing, and not to be discriminated against for exercising your rights. To opt out, use the Google and industry controls in Section 4, enable a Global Privacy Control (GPC) signal in your browser (which we honor for ad personalization where applicable), or email us. We do not knowingly collect or sell the personal information of anyone under 16.

EEA / UK residents (GDPR / UK GDPR). Our legal bases are: your consent (for sending the emails you signed up for, and for non-essential cookies/ads where consent is required), and our legitimate interests (to secure, operate, and improve the Service, and to fund it through advertising) balanced against your rights. You may withdraw consent at any time, and you have rights of access, rectification, erasure, restriction, objection, and portability. You also have the right to lodge a complaint with your local data-protection authority. Your data is processed in the United States (see Section 9).

7. Data retention

We keep your email subscription data while your subscription is active and for a reasonable period afterward to honor unsubscribe and suppression obligations, then delete or anonymize it. Server logs are kept for a limited period for security and troubleshooting. We delete data sooner on a valid deletion request, except where we must retain it to comply with law, resolve disputes, or enforce our agreements.

8. Security

We isolate personal data in a single dedicated, access-controlled, encrypted-at-rest data store, store your email keyed by a one-way hash, and apply least-privilege access. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information.

9. International data transfers

We operate in the United States, and the Service's infrastructure is hosted there. If you access the Service from outside the U.S., you understand your information will be processed in the U.S., where data-protection laws may differ from those in your country.

10. Children's privacy

The Service is intended for adults and is not directed to children. You must be 18 or older to submit any information. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, email privacy@squishytrade.com and we will delete it.

11. Third-party links

The Service links to third-party sites (such as resale marketplaces) that we do not control and that have their own privacy practices. This Policy does not apply to them; review their policies before providing information.

12. Payments

SquishyTrade never processes payments or handles money — not now and not in the planned trading layer — so we never collect or store any payment-card, bank, or other financial account information.

13. Changes to this Policy

We may update this Policy as the Service evolves. We will revise the “Last updated” date above, and material changes take effect when posted. Your continued use after a change means you accept the updated Policy.

14. Contact

Questions about this Policy or your data? Email privacy@squishytrade.com.