Privacy & data

Effective September 15, 2026. This page describes Appliance Leads, operated through DerbySquad.com.

What we collect

When you join, we store your name, email, buying criteria, optional notes, and consent. Trial signups also include the date and campaign labels associated with your visit. Member sign-in provides your verified account identifier, email, and name through Sign in with ChatGPT. Sign-in uses essential authentication cookies.

Seller submissions include appliance facts, price, general area, permission, and private contact or pickup instructions. We record claims, availability checks, pickup outcomes, and fee status. Please keep addresses and contact details in the private pickup field.

How we use and share it

We use buying preferences to match opportunities. Submitted offers generate draft descriptions for operator review. Approved descriptions, asking prices, and general pickup areas are visible only to signed-in members who have completed a profile. The operator can see seller details and member contact information. Private seller contacts and source links are released only to the assigned buyer after confirmation.

We do not sell your contact information. Email delivery, text alerts, external listing feeds, and online payments are not connected yet. Choosing email alerts records your preference for delivery once connected; it does not send a message now. The operator may personally follow up on submissions.

Claims and fees

One member can claim each opportunity. Claiming does not reserve the appliance on another website; the operator confirms arrangements with the seller. The $25 sourcing fee becomes due only after you approve and successfully acquire the appliance. The seller’s asking price is separate. The site records successful pickups and payments received outside the site, and currently collects no card information.

Measurement and security

We count marketing page views, form starts, and signups as aggregate events. We do not use advertising cookies or cross-site tracking. Browser Do Not Track signals disable visit and form-start measurement. Our hosting providers process requests to operate and protect the site. For abuse prevention, the application temporarily stores a daily hash derived from the request IP address, rather than raw IP addresses in the leads or measurement tables. Temporary records expire and are removed as requests arrive.

Storage and retention

Information is stored with OpenAI Sites and Cloudflare. Member and seller records are accessible through protected management tools. We retain records while handling sourcing activity and related payment or pickup questions. A recipient may retain pickup information they already saw, even if an opportunity is later closed.

Your choices

You can edit buying preferences and switch off future email alerts on the member board. You can decline any opportunity or cancel a claim before confirming acquisition. To request correction, deletion, or no further contact, reply to an operator email or use the interest form with your email and “privacy request” in the notes. We verify requests before changing records.