In effect since August 26, 2026. Marvel Mirror LLC, operator of YardBooth · 2501 Chatham Rd #5694, Springfield, IL 62704 · hello@yardbooth.com
The short version
YardBooth stores the information needed to publish sales, deliver offers, protect seller access, take listing payments, and count a small set of site actions. We do not sell personal information, run advertising, record sessions, or store what someone types into search.
Seller and store information
When a seller requests a store, we receive the seller’s name and email, sale name, general pickup area, description, payment status, and acceptance of the current terms. When the seller publishes items, we store the photos, titles, descriptions, categories, prices, and availability status.
The seller’s email is private. The sale name, general area, listing content, and seller-chosen public details are shown on the public store page. Sellers should never put a home address, private phone number, or other sensitive information in public listing text.
Buyer offers
When a buyer sends an offer, YardBooth receives the selected items, offered amount, buyer name, reply contact, preferred pickup window, and optional message so the seller can answer. That information goes to the seller whose items were selected. It is not made public.
Secure seller access
The seller manager and admin dashboard are separate Workers protected by Cloudflare Access. Cloudflare emails a short-lived one-time code and issues its signed Access session after verification. YardBooth does not create, email, or store a magic link, password, login token, or seller-session hash in D1.
The seller Worker receives the verified email from Cloudflare and then checks D1 for an active store owned by that exact email. The admin Worker separately requires the configured administrator email. Store changes are recorded in YardBooth audit records.
For abuse prevention, YardBooth and Cloudflare may briefly use ordinary network details such as an IP address. Cloudflare also processes identity and request details to provide Turnstile and the protected seller and admin sign-in services.
Payments
QuickBooks operates the card-payment page. Card details are entered there, not on YardBooth. We do not receive or store a card number. We keep the payment status, amount, date, and reference needed to activate listing space, handle a refund, and maintain business records.
Analytics
YardBooth’s own analytics records a generated event ID, a coarse event name, the page path, an optional button location such as “hero” or “footer,” and the time. Examples are a page view, opening Share, starting the seller flow, opening the manager, or starting a 25-item add-on.
Analytics does not store an IP address, user-agent string, email, name, search text, listing text, message, item ID, store ID, pointer path, keystroke, or session replay. It uses no analytics cookie and no third-party analytics service.
Global Privacy Control turns analytics off. The first-visit notice and the permanent Privacy button can turn it off in one click. The choice is stored only in that browser. See Cookies and analytics.
Service providers
- Cloudflare hosts the site, D1 database, R2 images, security checks, and outbound access email.
- QuickBooks / Intuit handles seller payments on its own checkout page.
- Email providers used by sellers and buyers handle messages delivered to their addresses.
Each provider handles information under its own terms and privacy notice. We use providers only for operating YardBooth, not for advertising.
Retention
Public sale pages normally stay online for 60 days. We may keep store, item, payment, approval, moderation, and offer records afterwards as needed for business records, security, disputes, and legal obligations. Cloudflare controls the authentication-session retention for the protected seller and admin services. Listing images are removed after the store and any reasonable recovery period are finished.
Your choices
Write to hello@yardbooth.com to ask what information we hold about you, correct it, delete it, or close a store. We will explain if a payment, fraud-prevention, suppression, or legal record must be kept.
Children
YardBooth is not directed to children under 13, and we do not knowingly collect personal information from a child under 13.
Changes
The effective date changes when this notice changes. A material change applies going forward.