Cookies and browser storage
We use essential browser storage for account sessions, security, your selected theme, seller-application intent and privacy choices. Optional visit measurement uses session storage to avoid counting the same visit repeatedly. It is off until you allow it. We respect Do Not Track and Global Privacy Control for this measurement.
External media players such as YouTube, Spotify and Apple Music are off until you allow external media. Once enabled, those providers receive connection information and may use their own storage under their privacy policies. Images and videos uploaded directly to DRIFT remain available. Links to external sites open those sites under their own policies.
Use Privacy settings here or in the app’s profile menu to accept, reject or change optional choices. We remember your decision in this browser for up to six months; another browser or domain has its own choice. Withdrawing permission stops future optional measurement and removes loaded external players, but cannot undo information already sent to a provider.
Optional Meta, TikTok and Pinterest ad measurement
Meta, TikTok and Pinterest ad measurement each have a separate, optional choice. Allowing one does not enable the others. Each is off until you allow it. If allowed, the public homepage and a clean membership welcome page can send page visits and completed-registration events to the selected provider for Instagram, Facebook, TikTok or Pinterest ad reporting. The selected provider receives browser and network information, such as IP address, browser details, page address and advertising cookie or click identifiers. We do not intentionally send your email, display name, password, sign-in tokens, private messages or member content in these events. Automatic or advanced matching is not used by these integrations.
DRIFT stores consented campaign labels and ad click identifiers in this browser for up to 30 days and attaches them to a new signup so email confirmation can preserve the campaign source. Provider-managed advertising cookies and local storage have their own lifetimes, described in the providers’ policies. Pinterest may store first-party advertising context after you allow it. A separate private registration record for each allowed provider, linked to your account, prevents repeated counting; it is removed when your account is deleted. Browser flags also reduce repeat event delivery. Meta processes received information under its Privacy Policy, TikTok under its Privacy Policy, and Pinterest under its Privacy Policy. Reporting can be incomplete because of privacy choices, browser protections and delivery failures.
Do Not Track and Global Privacy Control disable this measurement. You can withdraw permission in Privacy settings; this stops future optional events and removes that provider’s stored click identifiers, accessible first-party storage and advertising cookies from this site where possible. Shared campaign labels are removed when every provider is disabled. Withdrawal cannot undo information already received by a provider or remove third-party cookies controlled by that provider.
1. Who is responsible
DRIFT SIG, INC. ("DRIFT," "we," "us") is responsible for DRIFT, including the mobile applications and the service at driftzine.app. Privacy requests may be sent to hi@driftzine.com.
2. Information we collect
- Account information: email address, display name, account identifiers and authentication records.
- Member activity: rooms, replies, reactions, saved items, listings, offers or reservations you choose to create, plus content reports and member blocks.
- Seller applications and evidence: seller name, individual or business status, country, intended categories, introduction, portfolio links, policy acceptance records, item provenance documents and review decisions. Evidence uploads are private to the submitting seller and authorized DRIFT reviewers. Do not upload identity documents, unredacted payment details or unrelated personal information.
- Direct messages: text, DRIFT links, conversation participants, request decisions, timestamps, unread status and mute preferences. Messages are stored in our Supabase database and available to conversation participants. They are not end-to-end encrypted. Reporting a message makes that message and the reason available to authorized safety reviewers. Messaging has no attachments or SMS and does not disclose phone numbers. Messages and conversations are removed when a participating account is deleted; copies recipients saved outside DRIFT are not controlled by us.
- Uploaded media: profile photos, cover images, room images, videos and listing photos you choose to upload are stored to display your contributions. Public media may appear in shared links and previews.
- Notifications: notification preferences, delivery status and, when you enable browser push, the device subscription endpoint and encryption keys needed to deliver alerts. Email notifications use your account email address. You can change notification preferences in the app and revoke push permission in your browser or device settings.
- Test checkout: sandbox order references, item details, test amounts, fees, shipping settings, checkout status and any test shipping details entered during checkout. Use fictional test addresses and Stripe test payment details, not real card details.
- Support communications: information you include when contacting DRIFT.
- Technical information: IP address, device or browser details, request logs, security events and local preferences such as color mode. This may be recorded by our hosting and security providers when you use the service.
DRIFT currently offers Stripe sandbox checkout for testing only. It does not collect live payments or dispatch goods through this test flow. Offers and reservations outside test checkout record member intent only. Stripe hosts the payment form; DRIFT does not receive full card numbers or card security codes.
3. How we use information
On the public Club website we count visits and clicks into the app in daily totals. A temporary browser-session flag reduces repeat counts; it is not sent to our database. These counters contain no email addresses, account identifiers, IP addresses or post text. We respect browser Do Not Track and Global Privacy Control signals for these counters. We also review aggregate signup and first-contribution counts from existing service records to understand participation. These first-party counters are aggregate activity measures. The separate, optional Meta, TikTok and Pinterest ad measurement described above links consented new registrations to campaign information.
We use information to create and secure accounts, keep you signed in, operate community and market features, show your saved material, prevent misuse, troubleshoot the service, answer requests, meet legal obligations and improve reliability.
4. Service providers and disclosure
We use service providers only as needed to run DRIFT. Supabase provides account authentication and database services. Vercel provides application hosting, delivery and operational security. Zoho hosts our contact and support mailboxes and delivers enabled email notifications. Supabase also stores uploaded media and notification subscriptions. Stripe provides sandbox checkout and seller payment setup. Browser push providers deliver alerts to devices that have granted permission. Zoho delivers seller-review notifications and internal moderation alerts containing report/block identifiers and reasons so DRIFT can investigate safety concerns. Seller notifications contain an event reference and a link to the authenticated dashboard; private seller documents are not attached. Full reported content stays in the application database rather than being copied into those alerts. Apple and Google may process store, device and diagnostic information under their own policies when you obtain or use the mobile app.
We may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.
5. Public contributions
Seller application details and uploaded evidence are not public. Approved listing descriptions, provenance statements and item photographs are public, so redact private information. Rooms, replies, profile names and market listings are intended to be visible to other users and may be visible publicly. Do not include sensitive personal information in a public contribution.
6. Retention and account deletion
We keep account data while an account is active and for only as long as reasonably needed for the purposes above. A signed-in member can request permanent deletion from the account area. Anyone can also use our public account-deletion page.
Seller evidence uploads, application records and associated review history are removed from the active service when the account is deleted. Deletion removes the active account and associated member data described on that page. Rooms started by a deleted member may remain only as neutral placeholders so replies written by other members keep their context; the deleted member’s room text and account link are erased. Limited records may be retained when required for fraud prevention, legal compliance or dispute resolution. If residual copies exist in restricted provider backups, they remain only until routine backup rotation.
7. Your choices and rights
You may ask to access, correct or delete your account information. Depending on where you live, additional rights may apply. Email hi@driftzine.com from the address connected to your account so we can verify the request.
8. Security, children and international use
We use reasonable technical and organizational safeguards, but no online service can promise absolute security. DRIFT is not directed to children under 13. Our providers may process information in the United States and other countries where they operate, subject to their contractual and legal safeguards.
9. Changes and contact
We may update this policy when the service or applicable requirements change. We will revise the date above and provide additional notice when appropriate. Questions may be sent to hi@driftzine.com.