Privacy

What Flog It keeps about you, why, who else sees it, and what you can do about it. Written to follow South Africa's Protection of Personal Information Act (POPIA).

Last updated: 31 October 2026.

What we keep

Your account. Your name (the only thing other people see), your email address (for logging in and the emails described below; nobody else ever sees it), and your password, stored only as a scrambled hash we can't read back.

Your mobile number, if you add one. It's optional. It's never shown on your garage or to anyone browsing. If you allow it in Settings, you can choose to share it with one person, in one conversation; we record that you did.

Your garages and items. What you write, your photos, and the pin you drop for where your things are. The pin is never shown to anyone. Buyers see only the name of the nearest area, like "Walmer, Gqeberha". Photos are shrunk and the location and camera details stored inside them are removed before we keep them. We keep the date a photo was taken, to help group photos later.

Messages you send and receive on Flog It, and reports you make.

Login sessions. While you're logged in we keep the session, with the internet address and the browser it was made from, to keep your account safe. They go when you log out or the session expires.

What happens on the site, counted. For example that a garage was viewed, which share link brought the visit (such as "from WhatsApp"), or that an item was marked sold and for how much. These counts don't include your internet address or your location. Sale prices (without any names) help us show sensible prices in future.

We don't use advertising trackers or third-party analytics, and we don't sell anything about you.

Who else is involved

• Resend sends our emails (password resets and "you have a new message"). It gets your email address and that email's text.
• OpenFreeMap provides the map you drop your pin on. Like any website, it sees your internet address and which part of the map you're looking at, while you're placing the pin.
• Contabo hosts our server and the backups, in the European Union.

How long we keep it

As long as your account is open. Backups are kept for up to 90 days, then deleted.

Deleting your account

In Settings → Delete my account. Your name, email address, mobile number, password and sessions are deleted, your garages close, and your photos are deleted. Messages you sent stay in the other person's conversation, shown as from "Deleted user", so they still have their side of it. Items you had listed are kept, without photos or anything that identifies you, as sale-price records. Copies in backups go when those backups expire.

Your rights

You can ask what we hold about you, ask us to correct it, or object to how we use it. Email hello@flogit.africa. If you're not happy with our answer, you can complain to the Information Regulator (inforegulator.org.za).

Responsible party

Flog It, run by Thomas, contactable at hello@flogit.africa.