Privacy

Last updated 4 September 2026. Written in plain language on purpose; if anything here is unclear, email us.

Who we are

Vendapon ("we") runs vendapon.com. You can reach us at info@vendapon.com.

What we collect, and why

• Email address — to create your account, send you sign-in links, invite codes, and (only if you turn them on) updates about members you follow. We never show your email to other members.
• Profile details you choose to add — a name, handle, city, bio, and photo. These are public on your profile page and, unless you opt out, on the homepage's new-members wall.
• Invites and follows — which code you joined with, who you invited, who you follow. Your inviter can see that their code was used, and by whom (your name or a masked email).
• Purchases and ownership — when you buy a Vendapon piece we record the item, the machine it came from, and that you own it. This is what makes the certificate of authenticity work and lets you transfer or sell the piece later. Ownership history is kept permanently as a provenance record.
• Technical data — your IP address is used briefly for rate limiting (to stop code-guessing) and in our host's server logs. We don't run analytics or advertising trackers.

Where it lives

Data is stored with Supabase (database and photo storage, in the United States), served by Netlify, and email is sent through Mailgun. Each of these processes data only on our instructions.

Your rights

Wherever you are, and in particular if you're in the UK or EU under GDPR, you can ask us to show you the data we hold about you, correct it, export it, or delete it. Email info@vendapon.com from the address on your account and we'll act within 30 days. Deleting your account removes your profile, photo, follows, and email; ownership history for physical items is retained with your identity removed, because it's part of another owner's provenance record.

You can hide yourself from the homepage wall and turn off follow emails at any time from your page.

Cookies

One cookie, vp_session, keeps you signed in for 30 days. No third-party cookies.

Children

Vendapon is for adults. We don't knowingly collect data from anyone under 16.

Changes

If this policy changes in a way that matters, we'll email members.