Privacy

What is stored

Nothing else. There is no analytics, no advertising, no tracking and no profiling.

• Your Google account: the email address, display name and Google account identifier returned when you sign in. Sakend never receives your Google password.
• What you write: the sale title, introduction, item names, descriptions, prices, payment note, contact details, and collection areas. Areas are stored to postcode district only, and any coordinates are rounded to two decimal places.
• Photos you upload. EXIF, XMP and IPTC segments — which is where GPS coordinates and camera serial numbers live — are removed before the file is written to storage.
• Sign-in sessions: a device label you can edit, creation and last-use times, and a hash of the refresh token. The token itself is never stored.
• Abuse limits: counters keyed by a SHA-256 hash of the requesting IP address. The address itself is not stored.
• Reports and appeals: what the sender wrote, an optional contact they gave, and a snapshot of the reported content.

Who processes it

Sakend sends no email and integrates no payment provider, so there is no processor for either.

• Google Ireland Limited / Google LLC — sign-in only.
• Cloudflare, Inc. — hosting, the database, private object storage for photos, the bot check on the report and appeal forms, and content delivery.

Where it is processed

Data is held on Cloudflare's global network with the primary database copy placed in Western Europe to keep the page fast for buyers in the UK.

This is a latency choice, not a legal residency guarantee: Sakend does not promise that data never leaves the EU or UK. The reason it is acceptable here is that Sakend holds no identity documents, no payment details and no precise location.

How long it is kept

• A sale you never published is deleted after seven days without activity, along with its photos.
• A published sale is archived when you end it, or 30 days after its last collection date. The public page then answers 410 and the web address is not reissued to anyone else.
• A deleted item disappears from the public page immediately; its photos are removed from storage afterwards by a retryable job.
• Content removed for breaking the rules disappears from the public page immediately. The evidence snapshot is kept for 90 days.
• A reporter's contact detail is erased 30 days after the report is closed. The reason and the count are kept.
• Sessions are deleted when they expire or are revoked.
• Your Cloudflare provider keeps a seven-day recovery window on its database service. Sakend cannot use it to restore a single account, and does not offer that.

Your choices

• See everything: the app loads your full record on every start. There is no separate request to make.
• Delete everything: Account, then Delete account, in the app. Your public pages stop resolving immediately and your sessions are revoked in the same operation; photos, database rows and the Google link are then erased by background jobs, and a receipt records when that finished. Signing in again afterwards creates a completely new account.
• Object: use the support page. Sakend has no automated decision-making to object to.

Contacting us

Use the support page. It is the only channel, and it is monitored.