Privacy
Last updated October 6, 2026
Your marketplace information
Signing in provides BrimXchange with your account identifier, name and email. We store listings, uploaded photos, purchases, seller return addresses, buyer shipping addresses, package measurements, carrier rates, labels, tracking updates and dispute details to operate the marketplace. Listing descriptions and published hat photos are visible to visitors. Do not include personal documents or contact details in public listing photos.
After payment, we share the buyer’s delivery name and address with the seller so the seller can ship the hat. Order details are available to that buyer, that seller and the marketplace operator. Service providers process data needed to host the site, take payment and verify delivery.
Sign-in and account security
Auth0 processes email or social sign-in and verifies your identity. BrimXchange receives your account identifier, email and display name; it does not receive your password. Essential, secure cookies keep you signed in on this device: a session ends after 30 days without use, and after six months in any case, and sign-in attempts are protected for up to ten minutes. Signing out ends the session here and at Auth0, so the next sign-in asks for your credentials again. Accounts are not merged just because their email addresses match.
You can delete your account at any time from Your account. Deletion removes your account, connected sign-ins, profile, active listings and unused uploaded photos. Records of completed orders are retained only as required for payment, tax and dispute obligations.
Payments and shipping
Stripe hosts checkout and seller onboarding. Payment card details, identity verification and bank information are entered directly with Stripe; BrimXchange stores payment references and connected account identifiers. Shippo and carriers receive the seller’s return address, buyer’s delivery address and phone number, package measurements, and the buyer’s and seller’s sign-in email addresses (carriers require a contact email on each shipment; BrimXchange’s own contact address stands in for a seller who is no longer signed in) to validate addresses, quote rates, issue prepaid labels and check delivery. Return addresses are printed on shipping labels but kept off public seller offers; email addresses are not printed on labels.
Promoted seller offers
Sellers can opt into paid promotion of their own offers. We store their promotion choice, acceptance of the fee terms and the fee associated with an order. Promoted offers receive priority in the Seller offers showcase and carry a “Promoted” label. Selection uses active offers and listing details; it does not use cross-site browsing history. Seller promotion is separate from Google advertising described below.
Website advertising
Google advertising is currently disabled on this website. If website advertising is enabled, Google AdSense and its advertising partners may use cookies or other identifiers to deliver and measure ads and prevent fraud. They may process your IP address, browser and device information, and ad interactions. Advertising cookies can allow Google and its partners to show ads based on visits to this website or other websites.
We do not send account details, checkout information, shipping addresses, uploaded photos or order records to Google for advertising. Website advertising is excluded from the BrimXchange iPhone wrapper, account, checkout, payment, order and editing screens.
You can manage personalized advertising in Google My Ad Center and review Google's advertising information and Google's privacy policy. Any website consent and withdrawal controls must be available before advertising is enabled where required.
Identify a hat
Identify a hat compares your photo with the archive on your device. The photo is never uploaded to BrimXchange or anyone else; the page only downloads the archive’s reference data from BrimXchange.
You can opt in to a one-time download of a visual model (about 70 MB) for sharper matches. Only if you do, your device downloads the model from Hugging Face (huggingface.co, which sends the file from its download servers at hf.co addresses) and the software that runs it from jsDelivr (cdn.jsdelivr.net). Like any server, they see your device’s IP address and basic browser information when the files are requested; no photo, account information, cookie or referring page is sent to them. The files are kept in your browser’s storage for next time, with a small note of whether the model loaded on this device. Clearing this site’s data removes them.
Private offers
Offer amounts, counteroffers, responses and optional messages are stored with the buyer and seller account identifiers. This history is available to the two participants, not public visitors. Avoid sharing sensitive personal information in messages. Account deletion removes negotiations without an order; offer records linked to orders are retained with transaction and dispute records.
Notifications
Confirmed purchases, sales, offer responses and incoming offer messages appear in your private inbox. New-listing summaries and listing reminders are off until you opt in. Phone alerts have separate opt-in choices for purchases and sales, offers, messages, new listings and reminders. Your preferences, read status and most recent active app visit are stored with your account. Optional inactivity reminders wait at least seven days after that visit, repeat no more than weekly, and stop while you are active. Background notification delivery does not count as a visit. Inbox messages are retained for up to 30 days. If you enable iPhone alerts, Apple provides a device token that we store to deliver your selected notifications through Apple Push Notification service. Apple receives that token and a generic alert with a notification reference, not your private message text, offer price or delivery details. Tokens unused for 90 days are removed. Notification data is not used for cross-app tracking or shared with advertisers.
You can turn any phone-alert category off in Notifications or disable iPhone alerts while keeping the activity inbox. Signing out disables push alerts for your account until you enable them again. Deleting your account removes notification preferences, inbox records and device tokens. Alerts already delivered to your phone cannot be recalled.
Listing drafts on your device
While you prepare or edit a listing, this browser stores a draft linked to your signed-in account, including hat details, price, quantity and references to photos you have already uploaded. Drafts are not published listings and are not synced to other devices. They remain until you save the listing, discard the draft or clear this site’s browser data. Uploaded photos are stored separately on BrimXchange. Draft storage does not include passwords, shipping addresses, payment information or your acceptance of seller terms.
Retention and requests
Marketplace records are retained as needed to fulfill orders, resolve disputes, prevent fraud and meet applicable recordkeeping requirements. You can withdraw active listings from My collection. To request access, correction or deletion of your marketplace information, use BrimXchange Support. Some transaction records may need to be retained after an account or listing is closed.