Privacy Policy
This Privacy Policy explains how The BK Reseller LLC ("we", "us", "our") collects, uses, and shares information when you visit sneak.market or use the sneak.market inventory management service (the "Service").
We built sneak.market for sneaker resale businesses. We try to collect only what we need to run the Service.
1. Who we are
The BK Reseller LLC
[Address — to be added]
New York, USA
Contact: [email protected]
2. What information we collect
Information you give us
- Account details: full name, email address, phone number, business/account name, and a password (stored as a one-way hash — we never see or store your actual password).
- Inventory data you enter: product SKUs, sizes, purchase prices, sale prices, vendors, locations, and any notes you type into the Service.
- Correspondence: if you email us or reply to us, we keep those emails.
Information collected automatically
- Session cookie: a single cookie named
sidthat keeps you logged in. It contains a random identifier, nothing else. It is essential — the Service cannot function without it. - Server logs: our servers log basic request information (IP address, timestamp, page requested, browser user agent) for security and troubleshooting. Logs are retained for up to 30 days.
What we do not collect
- We do not use advertising cookies, marketing pixels, or third-party analytics that track individuals.
- We do not sell your personal information. Ever.
- We do not access your bank accounts, marketplaces, or any external inventory system on your behalf.
3. How we use your information
- To create and manage your account and provide the Service.
- To display market pricing data alongside the inventory you enter (via the StockX API).
- To send you essential service emails (password resets, security alerts, account changes).
- To send you product update emails and, if you opt in, marketing emails. You can unsubscribe at any time.
- To troubleshoot bugs and improve the Service.
- To comply with legal obligations and enforce our Terms.
Legal bases (for visitors in the EU/UK)
Where GDPR applies, we rely on: contract (to provide the Service you sign up for), consent (for marketing emails, which you can withdraw at any time), and legitimate interests (to secure and improve the Service).
4. Who we share information with
We share limited information with a small number of service providers ("sub-processors") who help us operate the Service. We do not sell or rent your information to anyone.
| Provider | Purpose | What they see |
|---|---|---|
| StockX | Market pricing data lookup | Product SKUs only (no user identifiers) |
| Cloudflare | DNS, network routing, DDoS protection | Traffic metadata (IP, request URL) |
| Resend | Transactional and marketing email delivery | Email address, name, message content |
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of our users, us, or others.
5. International data transfers
Our servers are located in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country. By using the Service, you consent to this transfer.
For EU/UK visitors, transfers rely on the transfer mechanisms available under GDPR, including Standard Contractual Clauses with our sub-processors where applicable.
6. How long we keep your information
- While your account is active: for as long as you use the Service.
- Cancelling your subscription: is not the same as deleting your account. You're moved to the free tier and your data is retained.
- After account deletion (requested by you): we keep account data for up to 60 days, then delete it permanently. During this window you can restore or export by contacting us.
- Server logs: up to 30 days.
- Emails to and from us: up to 2 years for support history and disputes.
- Legal / tax records: where a longer retention period is required by law, we keep records for that period.
7. Your rights
Depending on where you live, you have some or all of the following rights over your personal information:
- Access — request a copy of what we hold.
- Correction — ask us to fix inaccurate information.
- Deletion — ask us to delete your data.
- Portability — receive your data in a machine-readable format.
- Objection / restriction — ask us to stop or limit certain processing.
- Withdraw consent — where we relied on consent (e.g., marketing emails).
- Complain — to your local data protection authority.
To exercise any of these, email [email protected]. We will respond within 30 days.
California residents (CCPA/CPRA)
If you are a California resident, you have the rights above plus the right to know what categories of personal information we collect, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined by California law.
8. Cookies
We use one essential session cookie. We do not use advertising, analytics, or tracking cookies. See our Cookies Policy for details.
9. Security
We take security seriously. Passwords are salted and hashed with a modern one-way algorithm. Traffic is encrypted end-to-end with TLS. Access to production systems is restricted. That said, no service is 100% secure — you are responsible for keeping your account credentials safe and not sharing them.
10. Children
The Service is intended for businesses and users aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, email us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. Continued use of the Service after changes means you accept the updated policy.
12. Contact
Questions, requests, or complaints? Email [email protected].