Privacy Policy

Only what is necessary: a hashed email identifier, a random nickname, your encrypted key blob, listings you post, end-to-end encrypted messages, and reputation data. We do not store your real name, address, payment details, IP logs, or tracking cookies.

To authenticate you, display your listings, deliver encrypted messages, and calculate reputation scores. We do not sell, advertise with, or share your data with third parties except as required by law.

Messages are end-to-end encrypted (X25519 + AES-256-GCM). Passwords are hashed with Argon2id. Images are EXIF-stripped. One session cookie for auth — no tracking cookies.

You may request a copy of your data, account deletion, or corrections at any time via the settings page or our GitHub repository.

We may update this policy. Continued use of Bartr after changes constitutes acceptance.