The Marts & Crafts Gazette

Privacy Policy

Effective October 24, 2026. Until then, the Privacy Policy of October 11, 2026 applies.

1. What we collect

What you give us. Your email and password when you sign up. Your name, shop name, photo, town, radius, bio, craft categories, links, phone and email if you add them. Your pieces, photos, prices, stock counts, descriptions, sales you record, journal entries, market days you keep (takings, what ran out and its photos, the pieces you took and what came home), your sales tax rate, events you save or say you’re going to and where each stands (applied, waitlisted, accepted, booth fee paid), your application details (booth size, tent, power, insurance, a few words and a photo of your booth), photos and vendor details you add to fairs, calendars of fairs you suggest, comments, likes and follows, hold requests you make or answer, places you follow for a weekly roundup, and the drafts, hashtags, sign-off and saved replies you keep in My social posts. Photos, flyers, write-ups and sales sheets you give to the AI tools, questions you ask the help chat, and messages you send us through Contact us.

What the Service creates. Your credit balance and ledger, membership status, referral code and referral outcomes (including what the people you referred spent, as totals, for your free-month meter, and what you’ve earned from them and been paid, with your Stripe account’s id and whether Stripe says it’s ready to be paid, if you connect one), medals and points, push notification subscriptions and preferences, and counts of profile views, link taps, card scans and the fair pages members open, and visits that come from the links in your posts (as counts, not as who), and which members are a maker’s top fans, worked out from their hearts, comments, follows and hold requests.

What comes with using it. Basic server logs (IP address, browser, pages requested, time) kept for security and troubleshooting, and a small number of cookies: one to keep you signed in, and one that remembers a referral code for 30 days after you follow a maker’s link or scan their card. We also count visitors each day, and where they came from (a search engine or Facebook, say), from a scrambled form of your IP address and browser. The scrambling code is thrown away when the day ends, so the count can’t be traced back to you, and your address itself isn’t kept.

What we don’t collect. Your card number (Stripe handles payment and we see only the last four digits and the outcome). Your precise location: distances are worked out from the town you type, not from your device. We don’t run advertising trackers.

2. What we use it for

• Running the Service: your account, your page, your season, your calendar.
• Finding fairs near the town you gave us, showing distances to them, and telling you about new fairs near it and fairs near it taking vendors, if you leave those alerts on.
• What makers usually take home at a fair: the takings on market days you keep at a listed fair count toward a rounded range shown to Club members, only once three or more makers have kept a day there, and never with your name. You can turn this off in My account, and your days stop counting at once.
• Membership, credits, referrals, and receipts.
• Notifications you’ve turned on: likes, comments, follows, event updates, reminders.
• Weekly roundups you follow (the week’s fairs, or new handmade near a place you choose), and the morning alert when one of your social posts is due, if you leave it on.
• The weekly email, only if you ask for it under the bell: sent to your email address, with a link in every one that stops it.
• Your Club month, while you’re in the Crafters Club: an email on the 1st with your own numbers for the month before, with a link in every one that stops it, and a switch for it under the bell.
• One email after you join through a member’s invite, if you haven’t joined the Crafters Club by then: who invited you and what the Club adds, with a link that stops it.
• Keeping the Service safe: preventing abuse, fraud and scraping.
• Answering you when you write to us.
• Your calls with Marty: the words of each call, yours as Marty heard them and his, kept in your account so you can look back at them under My account. Never the sound. Only you can see them, and you can delete one or all of them there. We also keep when each call began and ended and how many minutes it used, to count your included minutes and credits.

We don’t use your content to train AI models, and we don’t use your information for advertising. The one exception is yours to make: if you turn on Feature me (in Share & earn), we may show your public pieces, with your shop name, in Marts & Crafts’ own posts on Facebook and elsewhere. Turn it off any time and we stop.

3. What is public

When your page is public, anyone with the link can see your shop name, name, photo, town, bio, categories, public pieces and their public prices, links, likes and comments, and any note you post across your page. Anyone who scans your QR code or taps Save contact gets a contact card with your page link, name, shop, town and photo, plus your phone and email only if you have switched them on. The app shows you exactly what a scan shares. Makers who choose to be seen as attending an event are shown by name on that event, and the fairs you’ve said you’re doing show on your public page under Find me at until they’re over.

If you share your wish list, anyone with its link sees your first name and the pieces on it, until you stop sharing. When you ask a maker to hold a piece, she sees your first name, the piece and the fair, never your email or phone, and you see only her answer. If you’re one of a maker’s top fans, we tell you, and you see it on her page. She sees that you are: your shop’s name if your page is public, otherwise your first name, and nothing else about you.

What you post or reply in Letters to the Editor is public, with your first name and your town beside it, whether or not your page is. When someone asks to see only people within so many miles, they see how far away your town is, never more exactly where you are. Letters to the Editor pages are kept out of search engines too.

Your public page is kept out of search engines like Google and Bing unless you turn on Show my page on Google (on My Page or in My account): then search engines may list your public page and your pieces’ pages, so people who search for what you make can find you. You can turn it off any time; search engines can take a while to drop a page they listed. Otherwise people reach your page through your link, your QR code or inside Marts & Crafts. Your posts and everything else under your page’s address stay out of search either way. What search engines are given besides is the fair directory: each listed fair’s own name, dates, hours and place, what it asks of vendors, and how many makers are going, never who.

Private by default and never on a public page: your sales, stock counts, journal, planner, application details and booth photo, calls with Marty, credit balance, membership, email address, phone number, and anything you have not made public.

When you apply to a fair on Marts & Crafts, its organizer sees your public page, your application details and your booth photo, until you withdraw.

If you turn on calendar sync in My planner, your calendar app reads your fairs from a private link. Anyone you give that link to can see the fairs on it (names, dates and places, nothing else), so keep it to yourself. Getting a new link stops the old one, and turning sync off stops it altogether.

4. Who we share it with

We share information only with the services we need to run the app:

• Supabase hosts the database, sign-in and file storage.
• Vercel hosts the app and serves the pages.
• Stripe handles payments for membership and credits, and pays out what members earn for bringing in paying members. If you connect Stripe to get paid, you give Stripe your bank and tax details on Stripe’s own pages; we send Stripe only a number that stands for your account here.
• OpenAI reads what you give the AI tools (a flyer, a write-up, a sales sheet) and, when Marty fills in a form for you, the names on your own lists he matches what you said to (your materials, your saved fairs, your pieces); it hears your voice on a call with Marty to understand it, and checks photos and posts for safety.
• OpenRouter passes some requests to the AI company whose model answers them: the help chat, sorting messages you send through Contact us, a second safety check of photos, and a photo you ask to have a new background painted behind it (painted by Google’s image model). Typesafe also helps sort those messages and tidy fair listings.
• These AI providers use what they receive to answer that request. We use only paid services that don’t train their models on it.
• Twilio sends us a text message when an urgent message arrives through Contact us, with a short note of it.
• OpenFreeMap and Apple Maps supply the map pictures; like any website, they see your device’s internet address when a map loads, and the area it shows. The Fair Map shows where you are only if you tap its button for that, and your device asks you first.
• jsDelivr and Google serve the software for the free photo tools, which run on your own device: your photos stay on it until you choose to save them.
• Push services (Apple, Google, Mozilla) deliver notifications to your device; they receive the message, not your account.

We don’t sell your information. We may disclose it if the law requires it, to protect someone’s safety, or if Marts & Crafts is ever sold, in which case the buyer takes on this policy.

5. How long we keep it

As long as your account is open. When you close your account (My account), your public page, content, photos, messages you sent us and personal information are deleted straight away. What stays:

• Payment and referral records, as long as tax, accounting and fraud rules require (usually 7 years). They show amounts and dates, not your content.
• Safety records of checks on things you posted, without what you posted.
• If you got the launch gift, a scrambled code made from your email address (not the address itself), so the gift goes to each person once.
• Fairs you shared, facts and vendor details you added and reports you made about a fair, which stay with the fair without your name, and calendars you suggested, which stay without it too.
• Copies in our backups, gone within 30 days.
• Copies other people already saved, such as a contact card on their phone.

Server logs are kept 90 days.

6. Your choices and rights

• See and change your information any time in My shop and My account.
• Make your page private, or switch off phone and email on your card, at any time.
• Turn notifications off, all or by kind, under the bell at the top of every page.
• Close your account in My account. Section 5 says what is deleted and what stays; an account that is paused or banned writes to us instead.
• Ask us for a copy of your information.

Depending on where you live you may have further rights under laws such as the GDPR or California’s CCPA, including to correct, restrict or object to how we use your information, and to complain to a regulator. Write to us and we’ll help.

7. Children

The Service is for adults. We don’t knowingly collect information from anyone under 18; if you think we have, tell us and we’ll delete it.

8. Security

Your data is encrypted in transit and at rest, access is limited by account, and sensitive details (like billing) are kept in separate, restricted storage. No system is perfect; if we learn of a breach affecting you we’ll tell you promptly.

9. Changes

We’ll update this policy when the Service changes. For changes that matter we’ll tell you in the app or by email before they take effect. The date at the top says when it was last changed.

10. Contact

Privacy questions or requests: support@martsandcrafts.app. See also our Terms of Service.