Privacy Policy

1. The Short Version

We only collect the minimum information required to run CD Sauce as a marketplace.

We don't sell your data. We don't track you unnecessarily.

2. What Information We Collect

We may collect:

• Account information (email, username, display name)
• Listing information (CD details, descriptions, photos)
• Transaction data related to marketplace activity
• Messages sent through the platform
• Shipping addresses (only shared with transaction partners after payment)

3. Payments & Financial Data

All payments are handled by Stripe.

• CD Sauce does not store credit card or payment details
• Stripe handles payment security and compliance

4. Authentication & Login

User authentication is handled by Clerk.

• Passwords and authentication data are managed by Clerk
• CD Sauce does not store passwords

5. What We Don't Do

We do not:

• Sell personal data
• Train AI models on your data
• Share your account details, messages, or addresses with advertisers
• Share data with third parties beyond the services named in this policy

6. Data Storage & Security

We take reasonable steps to protect the data we do store, but no system is perfect.

• Data is stored securely using industry-standard encryption
• Access to user data is restricted to essential operations
• We use HTTPS for all communications

Use of the platform is at your own risk.

7. Cookies

We use essential cookies to keep you logged in and make the platform work, a privacy-friendly analytics cookie (PostHog, see section 8), and an advertising cookie set by the Meta Pixel (see section 8).

8. Analytics & Session Replay

We use PostHog to understand how people use CD Sauce so we can fix what's broken and improve the experience.

• Product analytics— pages visited and actions like starting a listing or a checkout, linked to your account by username only (never your email or full name).
• Session replay— anonymised recordings of how pages behave during a visit, used only to diagnose problems. Every text field, form input, name, and address is automatically masked, and we do not record sensitive pages at all (checkout, orders, swaps, messages, your activity feed, account settings, profile editor, admin, onboarding, dashboard, and the sign-in / sign-up pages).

PostHog processes this data on our behalf. We don't use it for advertising and we don't sell it.

We also use the Meta Pixel, which tells Meta (Facebook/Instagram) which pages you visit on CD Sauce and a few shopping moments: viewing a CD, starting a checkout, completing a purchase (with the amount), and creating an account. With each of those Meta receives the page address, the listing's ID and the browser identifiers its own cookie sets. We use this to see which of our ads bring people who actually buy or sign up, and to show ads to people who've browsed the store. Meta never receives your account details, messages, or addresses from us. You can limit how Meta uses this data in your Facebook or Instagram ad settings.

9. Changes to This Policy

As CD Sauce grows, this policy may change. If it does, we'll update it here.

10. Questions?

If you have privacy-related questions, contact us at: support@cdsauce.com