1. Who is responsible
DRIFT SIG, INC. ("DRIFT," "we," "us") is responsible for DRIFT Signal, including the mobile applications and the service at driftzine.app. Privacy requests may be sent to hi@driftzine.com.
2. Information we collect
- Account information: email address, display name, account identifiers and authentication records.
- Member activity: rooms, replies, reactions, saved items, listings, offers or reservations you choose to create, plus content reports and member blocks.
- Seller applications and evidence: seller name, individual or business status, country, intended categories, introduction, portfolio links, policy acceptance records, item provenance documents and review decisions. Evidence uploads are private to the submitting seller and authorized DRIFT reviewers. Do not upload identity documents, unredacted payment details or unrelated personal information.
- Direct messages: text, DRIFT links, conversation participants, request decisions, timestamps, unread status and mute preferences. Messages are stored in our Supabase database and available to conversation participants. They are not end-to-end encrypted. Reporting a message makes that message and the reason available to authorized safety reviewers. Messaging has no attachments or SMS and does not disclose phone numbers. Messages and conversations are removed when a participating account is deleted; copies recipients saved outside DRIFT are not controlled by us.
- Uploaded media: profile photos, cover images, room images, videos and listing photos you choose to upload are stored to display your contributions. Public media may appear in shared links and previews.
- Notifications: notification preferences, delivery status and, when you enable browser push, the device subscription endpoint and encryption keys needed to deliver alerts. Email notifications use your account email address. You can change notification preferences in the app and revoke push permission in your browser or device settings.
- Test checkout: sandbox order references, item details, test amounts, fees, shipping settings, checkout status and any test shipping details entered during checkout. Use fictional test addresses and Stripe test payment details, not real card details.
- Support communications: information you include when contacting DRIFT.
- Technical information: IP address, device or browser details, request logs, security events and local preferences such as color mode. This may be recorded by our hosting and security providers when you use the service.
DRIFT Signal currently offers Stripe sandbox checkout for testing only. It does not collect live payments or dispatch goods through this test flow. Offers and reservations outside test checkout record member intent only. Stripe hosts the payment form; DRIFT does not receive full card numbers or card security codes.
3. How we use information
On the public Club website we count visits and clicks into the app in daily totals. A temporary browser-session flag reduces repeat counts; it is not sent to our database. These counters contain no email addresses, account identifiers, IP addresses or post text. We respect browser Do Not Track and Global Privacy Control signals for these counters. We also review aggregate signup and first-contribution counts from existing service records to understand participation. These are aggregate activity measures, not individual browsing profiles.
We use information to create and secure accounts, keep you signed in, operate community and market features, show your saved material, prevent misuse, troubleshoot the service, answer requests, meet legal obligations and improve reliability.
4. Service providers and disclosure
We use service providers only as needed to run DRIFT Signal. Supabase provides account authentication and database services. Vercel provides application hosting, delivery and operational security. Zoho hosts our contact and support mailboxes and delivers enabled email notifications. Supabase also stores uploaded media and notification subscriptions. Stripe provides sandbox checkout and seller payment setup. Browser push providers deliver alerts to devices that have granted permission. Zoho delivers seller-review notifications and internal moderation alerts containing report/block identifiers and reasons so DRIFT can investigate safety concerns. Seller notifications contain an event reference and a link to the authenticated dashboard; private seller documents are not attached. Full reported content stays in the application database rather than being copied into those alerts. Apple and Google may process store, device and diagnostic information under their own policies when you obtain or use the mobile app.
We may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.
5. Public contributions
Seller application details and uploaded evidence are not public. Approved listing descriptions, provenance statements and item photographs are public, so redact private information. Rooms, replies, profile names and market listings are intended to be visible to other users and may be visible publicly. Do not include sensitive personal information in a public contribution.
6. Retention and account deletion
We keep account data while an account is active and for only as long as reasonably needed for the purposes above. A signed-in member can request permanent deletion from the account area. Anyone can also use our public account-deletion page.
Seller evidence uploads, application records and associated review history are removed from the active service when the account is deleted. Deletion removes the active account and associated member data described on that page. Rooms started by a deleted member may remain only as neutral placeholders so replies written by other members keep their context; the deleted member’s room text and account link are erased. Limited records may be retained when required for fraud prevention, legal compliance or dispute resolution. If residual copies exist in restricted provider backups, they remain only until routine backup rotation.
7. Your choices and rights
You may ask to access, correct or delete your account information. Depending on where you live, additional rights may apply. Email hi@driftzine.com from the address connected to your account so we can verify the request.
8. Security, children and international use
We use reasonable technical and organizational safeguards, but no online service can promise absolute security. DRIFT Signal is not directed to children under 13. Our providers may process information in the United States and other countries where they operate, subject to their contractual and legal safeguards.
9. Changes and contact
We may update this policy when the service or applicable requirements change. We will revise the date above and provide additional notice when appropriate. Questions may be sent to hi@driftzine.com.