Privacy Policy
Last updated: October 15, 2026 · Effective: October 15, 2026
This policy explains what personal information No Flakin collects, where it comes from, how we use it, who we share it with, how long we keep it, and the choices and rights you have. We wrote it in plain English.
The short version: we collect what we need to run a marketplace and keep it safe. We screen messages and photos with automated tools, including AI. We do not sell your personal information or share it for targeted advertising. You can download your data or delete your account from your account page.
See also our Terms of Service and How text messages work.
1. Who we are
No Flakin (noflakin.com; wontflake.com redirects there) is run by Northslate LLC. "We," "us," and "our" in this policy mean Northslate LLC. We decide how your personal information is used, so we are the "business" responsible for it under California law.
This policy covers the site, our emails and texts, and any other place that links to it. It doesn't cover other websites or the people you deal with on No Flakin, who handle your information under their own practices once you share it with them.
2. What we collect, where it comes from, and why
In the last 12 months, and going forward, we collect the categories of personal information below. The words in parentheses are the category names California law uses.
Where it comes from: from you, when you sign up, list, message, rate, report, or contact us; from your device and browser automatically; from other users (for example, a message or rating about you, or a report); from Google, if you choose to sign in with Google (your name and email address); and from our service providers (for example, whether a text was delivered).
| Category | What it includes | Why we use it |
|---|---|---|
| Identifiers and contact details (identifiers; customer records) | Name or business name, display name, email address, phone number, account ID, IP address. | Create and run your account, sign you in, verify your phone and email, send notices, prevent fraud and duplicate accounts. |
| Account information (customer records) | Sign-in details (passwords are stored only as encrypted hashes by our sign-in provider), text-message consent, away mode, notification and account settings. | Run your account, respect your choices, keep your account secure. |
| Verification data | Phone verification codes (expire in 10 minutes), whether and when your phone and email were verified. | Confirm you control your phone number and email; stop fake and duplicate accounts. |
| Town and approximate location (geolocation, not precise) | The town you pick from our list for your profile, for searching, and for each listing. We store the town and its center point, not your street address. | Show distances and nearby listings, and show your town to others. We don't ask for your street address and we don't use your phone's GPS. |
| Listing content and photos (commercial information; audio and visual information) | Titles, descriptions, prices, categories, condition, year, make, model, hours, serial number or VIN (the number is shown only if you choose; a "Serial on file" badge shows either way), up to 12 photos, sold and inactive history. | Show your listings, run search, screen photos, draft listings with AI when you ask, investigate stolen equipment. |
| Messages | The written messages you send and receive on No Flakin, with time sent and screening results, and the notifications we show you. Phone numbers and email addresses that the contact-info filter hides are not stored. | Deliver messages, run the 48-hour clocks, screen for scams and abuse, handle reports and disputes. |
| Ratings, flakes, reports, and disputes (commercial information) | Stars and "Did they show up?" answers you give and receive, flakes and pauses, reports you make or that are made about you, disputes and their outcomes. | Show reliability on profiles, enforce the 48-hour rule and our terms, decide disputes. |
| Device and usage data (internet or other electronic network activity) | IP address, browser and device type, and the pages and actions requested, with their times, as recorded in our hosting and database providers' logs; error logs. | Keep the site working and secure, apply rate limits, fix bugs, understand how the site is used. |
| Text and email records | The texts and emails we send you, the number or address they went to, when, and whether they were delivered. | Send texts and emails, keep within our text budget, fix delivery problems, honor STOP requests. |
| Cookies | Small files that remember sign-in, your town, your "What do you run?" answer, recent categories, and short-lived screen messages. See "Cookies." | Keep you signed in and remember your choices. |
| Inferences (inferences) | Your "What do you run?" answer and the categories you have viewed recently. | Show those categories first on your homepage. We don't build advertising profiles. |
| Communications with us | Emails and requests you send us, including privacy requests and appeals. | Answer you, keep records of requests as the law requires. |
3. How we use your information
We use personal information only for the purposes in the table above and these business purposes:
- To provide No Flakin: accounts, listings, search, messaging, the 48-hour clocks, flakes, ratings, away mode, and notifications.
- To keep people safe: screening, the contact-info filter, rate limits, fraud and spam prevention, investigating reports and stolen equipment, and enforcing our Terms of Service.
- To communicate with you: notices on the site, emails, and texts if you opted in.
- To fix and improve the site, including debugging and measuring how features are used.
- To follow the law, respond to legal requests, and protect our rights and the rights and safety of others.
- To promote the No Flakin marketplace, using listings and listing photos as our Terms of Service allow. We don't use your personal information for targeted advertising.
If we want to use personal information for a new purpose that isn't compatible with these, we will tell you first and ask for consent where the law requires it.
4. AI screening and AI tools
We use automated systems, including AI models from third-party providers, to screen messages and listing photos for sexual content, harassment, and scams before they are shown to others, to draft listing text from photos when you ask, to suggest replies and first messages, and to flag spam or lowball offers. A human may review content that is flagged.
When we send your content to an AI provider, we send only what is needed for that check or task (for example, the message text, the listing photo, or the listing's title, price, and town), not the phone number or email on your account. Our AI provider processes it on our behalf under a contract. Under its commercial terms, our AI provider does not use this content to train its models, and keeps it only for a limited time for safety and abuse monitoring.
We also use AI to write a short summary of a dispute for the person who decides it. For that summary we send the conversation's messages, the dispute reason, the flake record, the listing title, and the two users' display names. The person deciding reads both sides, not just the summary, before deciding.
5. Automated decisions and how to contest them
- Screening holds. If screening flags a message or photo, it is held and not shown until a person reviews it. A person then releases it or removes it. The screening tool alone does not remove content or suspend accounts.
- The 48-hour rule. Flakes for missed deadlines and the 7-day listing pause after 3 missed deadlines in 90 days are applied automatically by the site's rules, which are explained in our Terms of Service.
- AI flags. Spam and lowball flags are only shown to the seller as a hint. They don't block anything.
- The contact-info filter. Phone numbers and email addresses in a buyer's messages are automatically hidden until the seller has replied in that conversation (see "Your phone number and the contact-info filter").
How to contest: if your content was held or removed, or you think a flake or pause is wrong, use the dispute button on the flake (for flakes) or email support@noflakin.com (for anything else). A person will review it and tell you the result. We don't use automated decisions to make decisions about you that produce legal or similarly significant effects, such as decisions about credit, housing, or employment.
6. Your phone number and the contact-info filter
- Your phone number and email are never shown on listings or on your profile.
- In a conversation, phone numbers and email addresses in a buyer's messages are automatically hidden until the seller has replied in that conversation, and the hidden details are not stored. Sellers' messages are not filtered. Once the seller has replied, it is up to each of you whether to share your contact details, and once you do, the other person can use them outside No Flakin.
- We use your phone number only to verify it, to send the texts described below, to prevent fraud and duplicate accounts, and to contact you about your account.
7. Text messages
We text only for one-time phone verification codes you ask for, and, if you opted in, 48-hour reply reminders and "listing went inactive" alerts. We don't send marketing texts. Message frequency varies. Message and data rates may apply.
Reply STOP to any text to opt out, or turn texts off in your account settings. Reply HELP for help. Agreeing to texts is not a condition of buying or selling anything.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Our text provider receives your number and the message only to deliver it.
8. What other users can see
Anyone, including people without an account and search engines, can see your listings (with photos, price, and town), your display name, your town, your star rating, how often you showed up, and your flake count. The serial number or VIN on a listing is shown only if you choose to show it. If you mark a listing sold, the people who messaged you about it are told it sold.
The people you message see the messages you send them, and they keep their copy even if you delete your account.
We never show your email address or phone number to other users. They see them only if you type them into a message yourself, which a buyer can do only after the seller has replied. We don't collect your street address.
9. Who we share it with
We share personal information only as described here. In the last 12 months we have disclosed each category in the table in "What we collect" for a business purpose to the following kinds of recipients:
- Service providers that run parts of No Flakin for us: website hosting, database, sign-in and photo storage, text messaging and phone verification, email delivery, and AI screening and AI tools. They may use your information only to provide their service to us, under contracts that limit what they can do with it.
- Other users, as described in "What other users can see."
- Google, if you choose to sign in with Google (Google's own privacy policy applies to what it does).
- Law enforcement, courts, and others, as described in "Legal requests and safety."
- A buyer or successor of the business, as described in "If the business changes hands."
Here are the service providers we use today. We will keep this list current. We don't use any analytics, advertising, or error-tracking service today; if we add one, we will add it to this list first.
| Provider | What they do for us | Information they handle |
|---|---|---|
| Vercel Inc. | Hosts the website | Device and usage data, IP address, everything shown on the site |
| Supabase, Inc. | Database, sign-in, and photo storage | All account, listing, message, rating, and flake data; photos |
| Twilio Inc. | Text messages and phone verification | Phone number, text content, delivery status |
| Resend | Email delivery | Email address, email content, delivery status |
| Anthropic, PBC | AI screening and AI tools | Message text, listing photos and listing details, dispute details and display names sent for a summary |
| Google LLC (only if you use Google sign-in) | Sign in with Google | Name and email address |
10. Legal requests and safety
We may share personal information when we believe in good faith it is needed to: follow the law or a valid legal process such as a subpoena, warrant, or court order; respond to government or law enforcement requests; investigate or help law enforcement investigate suspected stolen equipment, fraud, or other crimes; protect the safety of any person; or protect our rights, our users, or the site, including enforcing our Terms of Service.
For suspected stolen equipment, we may share the listing's details, photos, and serial number or VIN with law enforcement, the rightful owner, or theft-recovery or equipment registry services. We share messages and account information with law enforcement only as the law allows, and not with private parties unless the law requires it or you agree.
Where the law allows and it is safe, we will try to tell you before we share your information in response to a civil legal request.
11. If the business changes hands
If No Flakin is sold, merged, reorganized (for example, moved into a company the operator forms), financed, or goes through bankruptcy, personal information may be transferred to the new owner as part of that deal. The new owner must keep using it as this policy describes unless you are told otherwise and given any choices the law requires.
12. We don't sell or share your personal information
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those words are defined in California law. We have not done so in the last 12 months. We don't knowingly sell or share the personal information of anyone under 16.
Do Not Sell or Share: because we don't sell or share personal information, there is nothing to opt out of today. If that ever changes, we will update this policy, add a "Do Not Sell or Share My Personal Information" link before we start, and give you the right to opt out.
Opt-out preference signals: if your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing for that browser. We don't respond differently to "Do Not Track" signals because there is no common standard for them.
We don't use advertising cookies, ad networks, or tracking pixels from ad companies.
13. Sensitive personal information
Some information we handle counts as "sensitive" under California law: your account sign-in details, and the content of messages you send to other users through No Flakin.
We use sensitive personal information only to provide No Flakin, keep it safe and secure, prevent fraud and illegal activity, and for other purposes California law allows without an opt-out. We don't use it to infer things about you. Because we only use it for those purposes, the right to limit its use doesn't currently apply, but you can still ask us about it.
We don't collect government ID numbers, financial account or card numbers, precise geolocation, or biometric information, and we ask you not to put them in listings or messages.
If we add paid features (see our Terms of Service), card payments will be handled by a payment processor under its own privacy policy, and we will not receive or store your full card number. We will update this policy before any paid feature starts.
14. How long we keep it
We keep personal information only as long as we need it for the purposes in this policy. The periods below are our maximums; we may delete sooner. When we no longer need information, we delete it or make it anonymous so it can't be linked back to you.
| Information | How long we keep it |
|---|---|
| Account and profile | While your account is open. When you delete your account, your name, email address, phone number, and sign-in are removed right away. A "Deleted user" record (with your town and any suspension record) stays so the conversations, ratings, and flakes linked to it still make sense. |
| Listings and photos | While the listing is on the site, including as sold. Taken down right away when you delete your account, then deleted with its photos within 2 years, unless held for a stolen-equipment or fraud investigation. |
| Messages | Up to 2 years after the conversation's last message. Messages stay, under "Deleted user", for the same period after either person deletes their account. |
| Ratings and flakes | Kept after you delete your account, under the name "Deleted user", so other users' records add up. |
| Notifications | Up to 1 year. |
| Reports, disputes, held or removed content | Up to 3 years after the matter is closed, to handle repeat abuse and legal claims. |
| Phone verification codes | Expire after 10 minutes. Whether your phone and email were verified: while your account is open; cleared when you delete it. |
| Text and email records | Up to 1 year, including the number or address a message went to, even if you delete your account sooner. |
| Device, usage, and security logs | Up to 90 days, longer if needed for a security investigation. |
| Privacy requests | 24 months, as California law requires. |
| Backups | Deleted on a rolling basis within 30 days. |
| Suspended or banned accounts | Only what we need to stop the person from coming back, for up to 5 years. |
15. Security
We protect personal information with reasonable safeguards for the kind of information we hold, including encrypted connections (HTTPS), encryption at rest by our database provider, row-level access controls on every database table, limited staff access, rate limits, and service providers with their own security programs.
No system is perfectly secure, and we can't promise your information will never be accessed without permission. Keep your sign-in safe and tell us at support@noflakin.com if you think your account was compromised. If a data breach affects you, we will notify you as the law requires.
16. Your California privacy rights
If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the rights below. We give the same rights to all our users wherever they live in the United States.
16.1 Your rights
- Right to know and access: ask what personal information we collect, use, disclose, and why, and get a copy of it in a portable format.
- Right to delete: ask us to delete personal information we collected from you, with some exceptions (for example, information we need to finish a transaction, keep the site secure, prevent fraud, or follow the law).
- Right to correct: ask us to fix information that is wrong.
- Right to opt out of sale or sharing: we don't sell or share, so there is nothing to opt out of today (see "We don't sell or share your personal information").
- Right to limit use of sensitive personal information: see "Sensitive personal information."
- Right to non-discrimination: we won't deny you service, charge you a different price, or give you a different level of service because you used these rights.
16.2 How to use your rights
- In the app: go to your account page to download a copy of your main account data (your profile, listings, the messages you sent, ratings, flakes, and disputes) or to delete your account (right to delete). You can correct most information by editing your profile or listings. For a full copy of everything we hold about you (right to know and access), email us.
- By email: send a request to support@noflakin.com with the subject "Privacy request."
16.3 How we check it's you
Requests made while you are signed in are verified by your sign-in. For email requests, we will match details you give us with what we have on file, and may send a code to the phone or email on your account. We will ask for more only if needed, and we use what you give us only to verify the request. If we can't verify a request, we will tell you why.
16.4 Authorized agents
You can have an authorized agent make a request for you. We will ask for written permission signed by you, and may ask you to verify your identity directly with us, unless the agent has a valid power of attorney.
16.5 How long it takes
We will confirm we got your request within 10 business days and answer within 45 calendar days. If we need more time (up to another 45 days), we will tell you why. Requests are free unless they are clearly excessive or repetitive. You can ask to know up to twice in 12 months. If we deny a request, we will explain why and how to follow up.
16.6 Other California notices
Shine the Light (California Civil Code §1798.83): we don't share personal information with others for their direct marketing.
This policy is our notice at collection: the categories, purposes, and retention periods above apply when we collect your information.
17. Rights in other US states
Several other states, such as Colorado, Connecticut, Oregon, Texas, Utah, and Virginia, give residents similar rights: to access, correct, delete, and get a copy of personal information, and to opt out of targeted advertising, sale, and certain profiling. We honor these requests for all US users the same way as California requests above. We don't do targeted advertising, sell personal information, or use profiling that produces legal or similarly significant effects.
If we deny your request, you can appeal by replying to our answer or emailing support@noflakin.com with the subject "Privacy appeal." We will respond within the time your state's law requires. If you are not satisfied with the appeal, you can contact your state attorney general.
18. No one under 18
No Flakin is only for adults. You must be 18 or older to make an account, and we don't knowingly collect personal information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete their information. If you think a minor is using No Flakin, tell us at support@noflakin.com.
19. For people in the United States only
No Flakin is meant for people in the United States, and our providers store and process information in the United States. We don't target people outside the US. If you use No Flakin from another country, your information will be handled in the US under this policy and US law.
20. Cookies
We use a small number of first-party cookies to make the site work and remember your choices. We don't use advertising or cross-site tracking cookies, and we don't use analytics cookies.
The site also keeps two small notes in your browser's session storage, which is cleared when you close the tab: an unsent message you started typing to a seller, so it isn't lost if the page reloads, and whether the logo animation has already played. We don't receive these notes (a draft reaches us only when you send it).
You can block or delete cookies in your browser settings. The site will still work for browsing, but you will need to sign in again and it will forget your town and homepage choices.
| Cookie | What it does | How long it lasts |
|---|---|---|
| Sign-in session (from our sign-in provider, named sb-…-auth-token) | Keeps you signed in and secure. | Until you sign out or the session expires |
| nf_town | Remembers the town you picked, so search shows equipment near you. | 1 year |
| nf_runs and nf_runs_skipped | Remembers your "What do you run?" answer (or that you skipped it), so your homepage shows those categories first. | 1 year |
| nf_recent_cats | Remembers categories you looked at recently, so they show first. | 1 year |
| nf_intro_seen | Remembers that the homepage animation already played, so it plays once per visit. | Until you close your browser |
| nf_moment_… and nf_inbox_pop | Shows a short confirmation once after you do something (like "Handshake kept" after a reply), then clears itself. | 1 to 10 minutes |
| nf_demo_user (demo version only) | In the demo version of the site, remembers which test user you are. Not used on the live site. | Until you close your browser |
21. Changes to this policy
We may update this policy. We will change the "Last updated" date at the top, and if a change is material, we will tell you by email or on the site before it takes effect. We won't use personal information we already have in a materially different way without telling you and getting consent where the law requires.
For example, if we start showing ads, add a paid feature, or add a new AI tool, we will update this policy first if it changes what we collect, how we use it, or who we share it with.
22. Contact us
Questions or requests about your privacy? Email support@noflakin.com with the subject "Privacy."
If you have a disability and need this policy in another format, email us and we will help.