Privacy Policy

1. Who We Are

RePlay Cycle operates the website at replaycycle.org and the RePlay Cycle mobile application (the "Service"). Our mission is to reduce sports textile waste through peer-to-peer jersey swaps, donations, and a circular marketplace.

Contact: admin@replaycycle.org

2. Information We Collect

2.1 Information You Provide

• Account information: name, email, password (hashed), username, profile photo.
• Jersey listings: sport, team, size, condition, photos, description.
• Swap and donation activity.
• Messages between users.
• Organization information (org/join form).
• Payment information — handled directly by Stripe. We do not store card numbers.
• Social posts and likes.

2.2 Collected Automatically

• Location: approximate city-level via IP or device GPS (with consent). Geocoding via OpenStreetMap/Nominatim — no personal data sent to commercial providers.
• Usage data: pages visited, features used, session duration (Vercel Analytics).
• Device info: browser type, OS, device type.
• Log data: IP address, referring URL, error logs.

2.3 Cookies

We use session cookies for authentication (Supabase Auth) and local storage for preferences. No advertising trackers or third-party marketing cookies.

3. How We Use Your Information

• Provide and operate the Service including swap matching, donations, and marketplace.
• Send transactional emails (verification, confirmations, password resets).
• Process payments via Stripe.
• Display community content in the social feed.
• Generate environmental impact certificates.
• Improve the Service through anonymized analytics.
• Detect and prevent fraud and abuse.
• Comply with applicable laws.

We do not sell, rent, or share your personal information with advertisers or data brokers.

4. Third-Party Services

5. International Users

RePlay Cycle is operated from Redmond, Washington, USA. By using the Service, you consent to the transfer and processing of your data in the United States.

European Users (GDPR): If you are located in the European Economic Area, you have rights including access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is your consent (given at registration) and legitimate interest in operating the Service. To exercise your rights, contact admin@replaycycle.org.

Brazilian Users (LGPD): Users in Brazil have rights under the Lei Geral de Proteção de Dados including confirmation, access, correction, deletion, and portability of personal data. Contact us to exercise these rights.

Canadian Users (PIPEDA): We comply with Canada's Personal Information Protection and Electronic Documents Act. You may access or correct your personal information by contacting us.

California Users (CCPA): California residents may request information about data we share with third parties for direct marketing. Submit requests to admin@replaycycle.org.

6. Your Rights

• Access the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Export your data in a portable format.
• Opt out of non-essential communications.

Email admin@replaycycle.org. We respond within 30 days.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. Contact us to request deletion if applicable.

8. Security

We use HTTPS, hashed passwords, Supabase Row Level Security, and restricted server credentials. No method is 100% secure, but we are committed to protecting your data.

9. Changes

We may update this policy. Material changes will be communicated via email or in-app notice. Continued use constitutes acceptance.

10. Contact