Privacy Policy

The owner of the database and the data controller for the personal data described here is Barteria — operated by Oded Moshe (ברטריה — ע״י עודד משה), VAT-exempt dealer (osek patur) no. 021384789, 15 Maayan St., Rosh HaAyin 4853312, Israel, phone 052-4788477. Requests about your data (access, correction or deletion) go to our privacy contact at oded.moshe5@gmail.com.

The service is offered to people located in Israel. Data is processed on servers in the European Union and in Israel; our processors are listed in section 6.

Account data: your mobile number and/or email address (used for sign-in codes and links), the language, theme and currency you choose, and the dates you signed up and were last active.

Profile data: display name, optional photo and bio, clothing sizes you optionally enter, and your neighborhood and city.

Location data: the coordinates of the place you choose during onboarding or in Settings, rounded to four decimals (about 11 meters) before storage. See section 4.

Items and activity: the items you list (photos, descriptions, category, declared value), your swipes, matches, chat messages, meeting proposals, swap confirmations, ratings you give and receive, wishes you post, reports and blocks.

Payment data: for the luxury unlock fee and business campaigns we store the amount, currency, status, a receipt and a reference from the payment provider. Card details never reach our servers.

Device and technical data: a session identifier stored in a cookie, your browser's user agent and IP address for security logging, and, if you enable push notifications, the push endpoint your browser issues.

Usage data: one record per day on which you used the app (for daily and monthly active-user statistics), and error reports your browser sends when something breaks.

To run the service: sign you in, show you items near you, create matches, run chats, confirm swaps and compute reputation.

To keep the community safe: verify luxury items, review flagged listings, handle reports, no-show contests and blocks, and enforce the Terms of Service.

To process payments and issue receipts as required by tax law.

To communicate with you: sign-in codes, match and message notifications (in-app, push and email according to your preferences) and service announcements.

To improve and secure the service: aggregated statistics, rate limiting, fraud and abuse detection, and error diagnostics.

To offer optional AI-assisted features (listing suggestions, description rewrites, on-demand message translation) and to help our moderators spot likely scams, payment requests outside the app and prohibited items. These features are optional, nothing is published or decided automatically, and you can keep using the service without them.

Legal bases (where the GDPR applies): performance of our contract with you, our legitimate interests in safety and security, your consent for push notifications and location access, and legal obligations for payment records.

You choose how to set your location: your device's GPS (with your permission), an address search, or a neighborhood from a list. The address text you searched for is sent to our geocoding proxy and, from there, to OpenStreetMap's Nominatim service without your identity.

We store your location rounded to about 11 meters. Other users never see it. They see your neighborhood name, a public point moved 250 to 450 meters away from your location (it stays fixed and is computed with a secret key only we hold), and the distance to that point in coarse bands only: “under 500 m”, then whole kilometers. Radius filters are measured from the public point too, so nobody can find your address by moving their own location or changing the radius.

Meeting places you propose in a chat are shared with the other party of that match only. Items inherit your profile location unless you set a different pickup point, which is limited to 25 km from your profile.

Your public profile shows your display name, photo, bio, neighborhood and city, badges, aggregated ratings, completion rate, response-time tier, member-since date and your active items. It never shows your phone number, email address, exact location or the items you are currently swapping.

Within a match, the other party sees your messages, meeting proposals and, after a swap, the rating you gave once it is revealed. Chats are private to the two of you and to our moderators when a report or dispute requires it; every moderator access to a chat is logged.

Business accounts that run campaigns see aggregated impressions and clicks only, never who saw their card.

Stripe (payments): receives the amount, currency and your email for the receipt. Stripe is a PCI-DSS certified processor and processes card data under its own privacy policy.

SMS and email delivery providers: receive your mobile number or email address and the message content (sign-in codes and notifications).

OpenStreetMap / Nominatim (OpenStreetMap Foundation): receives the address text you search and the coordinates you reverse-geocode, through our proxy that adds no identifying information. Map tiles are loaded from OpenStreetMap tile servers by your browser. For reverse geocoding only coordinates rounded to three decimals (about 100 m) are sent. No name, e-mail or account identifier is sent.

Google LLC (Google Cloud, Firebase): Firebase Authentication receives your email address, your mobile number (if you choose phone sign-in) and a Google identifier to sign you in, including Sign in with Google. The service is hosted on Firebase App Hosting (Cloud Run), the database is on Cloud SQL and photos and files are in Cloud Storage, so all the data you give the service is stored there, in Google's data center in the European Union (europe-west4, Netherlands). Google acts as a processor on our behalf.

Photo storage: Photos are re-encoded on upload and stripped of EXIF metadata, including any embedded GPS coordinates. Videos are not re-encoded, but location data embedded in them (GPS tags and location metadata) is removed before a video can be shown to anyone.

Anthropic, PBC (optional AI features): while you write a new listing, the first photo you add is sent to Anthropic to fill in the listing's details. This happens automatically, once per listing, as long as the "Fill in automatically from the photo" switch on the first screen is on (it is on by default, and you can switch it off there), and again each time you tap "Fill in from the photo" or "Fill in again from the photo", which also work when the switch is off. The title you type is also sent, without a tap, to suggest a category that you can always change. When you open a listing written in another language, its title and description are also sent to Anthropic, without a tap, to translate them into your language, never with the name of whoever wrote it or any other detail about them; the translation is stored with the listing and erased with it. This means that the text of a listing you publish may be sent to Anthropic when another member views it in a different language. When you ask for a value estimate while writing a listing, we send Anthropic the title, category, condition, details and description of that listing and the answers you give for the estimate (what it cost new, its age, whether it is complete, a short note), with any phone number, email address or link removed, and nothing else about you; the estimate is shown to you only and is not saved. When you tap "Improve description", or "Translate" on a chat message, we send Anthropic only what that feature needs to produce the suggestion — your description text, or the text of that one message. We never send your name, account identifier, phone number, email address or location. Separately, where we have switched it on, an automatic safety check sends the text of new listings, wish posts and profile bios and the first messages of a match to Anthropic to flag possible scams, requests for payment outside the app and prohibited items; it only adds a flag for our moderators, who make every decision, and it never removes content or restricts an account by itself. Anthropic processes this content on our behalf and may do so outside Israel and the European Union, including in the United States. A translation is stored with its message and erased with it. The existing photo features also send the photo you choose to Anthropic: the shelf scan ("What is my storage worth?") and "Search by photo" send that one photo, re-encoded on our server so that all metadata, including any GPS data, is removed, together with a fixed prompt and nothing about you.

We do not sell personal data and do not use advertising networks that track you across sites. Sponsored cards are matched by neighborhood radius only.

We disclose data to authorities when legally required, and to defend our rights or the safety of users.

Account and profile data: until you delete your account. Sign-in codes: 10 minutes; sign-in links: 15 minutes; sessions: 30 days of inactivity.

Matches and chats: message contents are erased 12 months after a match closes; the match record (dates, status, outcome) is kept for reputation statistics.

Ratings: kept as long as the rated account exists. If you delete your account, the ratings you gave become anonymous but their scores are kept so other users' averages do not change.

Payments and receipts: 7 years, as required by Israeli bookkeeping and tax rules, with your name and email anonymised after account deletion.

Moderation records (reports, decisions, restrictions, audit log): up to 3 years, to enforce the terms consistently.

Security logs (IP addresses, error reports): up to 90 days. Daily activity records: 24 months, aggregated.

Access and correction: your profile, settings and items are editable in the app at any time. You can ask us for a copy of your data at oded.moshe5@gmail.com. You can also download a file with your data yourself at any time, in Settings → Download my data.

Deletion: Settings → Delete account erases your account as described in the Terms of Service (section 17), immediately and without contacting support. Data we must keep by law is retained in anonymised form. We also delete your sign-in account at our authentication provider (Google Firebase Authentication); if that fails, we retry automatically. If the account was under an active ban when it was deleted, we keep only a salted one-way hash of its email address or phone number until the ban ends, so that it cannot be used to open a new account in the meantime.

Notifications: choose push, email and in-app channels, mute specific notification types and set quiet hours in Settings → Notifications. You can revoke push permission in your browser at any time.

Location: you can change your location at any time and choose the neighborhood list instead of GPS. So that nobody can pinpoint a neighbor's home by moving around again and again, location changes are limited to a few per day.

Objection and complaints: you may object to processing based on our legitimate interests. You have the right to lodge a complaint with the Israeli Privacy Protection Authority or, where the GDPR applies, your local supervisory authority.

We only use Barteria’s own (first-party) cookies. There are no third-party advertising or tracking cookies, and we don’t sell data. The cookies are:

Needed for the service: brt_session — keeps you signed in (up to 30 days, or until you sign out); brt_magic_nonce and brt_handoff — tie a sign-in link or a sign-in handoff to the browser that asked for it (a few minutes); NEXT_LOCALE — your language; brt_market and brt_tz — your country and time zone, for currency, units and times (one year).

Joining: brt_intent — the shared content you opened, so we can bring you back to it after sign-up (one day); brt_hood — the neighborhood you picked on a neighborhood page, pre-selected at sign-up (7 days); brt_invite_next — returns you to a circle or event invitation after sign-up (one day); brt_pv — a random id that prevents double votes in a "help me choose" poll, stored by us only as a hash (one year).

Invites and campaigns: brt_ref — the invite code of whoever shared with you, so the sign-up is credited to them (30 days); brt_src — where you first came from (utm tags, e.g. "whatsapp" or "poster"; 30 days). It is saved once at sign-up and used only for aggregate per-channel counts — never for advertising.

The installable app keeps your chosen theme, install-banner preferences and drafts, cached pages and queued scrolls or messages in the browser’s local storage, so it keeps working offline. You can clear all of this by removing the app or deleting the site’s data in your browser.

Sign-in codes and links are stored as salted hashes and expire quickly. Drop-off PINs are hashed and encrypted. Connections are encrypted in transit; photos are stored under random identifiers and verification photos are served only to their owner and moderators.

Admin access to personal contact details requires an explicit, logged action. We apply rate limits and monitoring to detect abuse. No system is perfectly secure; if we learn of a breach affecting you we will notify you as the law requires.

Barteria is for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

We may update this policy. Material changes are announced in the app before they take effect, and the date at the top always reflects the current version.

Privacy questions and data requests: oded.moshe5@gmail.com, by phone at 052-4788477, or by mail to Barteria — Oded Moshe, 15 Maayan St., Rosh HaAyin 4853312, Israel. General support: oded.moshe5@gmail.com.