Privacy Policy
For the SF Thrifts map at
www.sfthrifts.com and the
SF Thrifts iPhone app.
Effective 3 September 2026. Last updated 3 September 2026.
The short version
- We do not ask you to create an account, and we do not know who you are.
- If you tap the location button, your device works out where you are and draws a dot on the map. That location is never sent to us and never stored. It stays on your phone.
- There is no advertising, no analytics, and no tracking of any kind.
- We do not sell or share your personal information. We never have.
- The map is a list of shops. Using it does not require us to collect anything about you.
The rest of this page is the detailed version, including the small amount of technical information our hosting providers handle automatically.
1. Who we are
SF Thrifts is a free map of vintage, thrift, consignment and antique shops in San Francisco and the East Bay. It is made by reWearwolf, and it exists in two forms: a website at www.sfthrifts.com and an iPhone app. This policy covers both. Where they differ, it says so.
For the purposes of the UK and EU General Data Protection Regulation, reWearwolf is the data controller. You can reach us at the address in section 13.
2. What we do not do
It is easier to describe this service by what it leaves out, so we will start there. We do not:
- ask you to register, sign in, or give us a name or email address;
- show advertising, or work with any advertising network;
- run analytics, tracking pixels, session recorders, heatmaps or fingerprinting of any kind;
- track you across other apps or websites. The iPhone app does not access your device's advertising identifier (IDFA) and will never present you with an App Tracking Transparency prompt, because there is nothing for it to ask permission to do;
- set advertising cookies or third-party cookies;
- build a profile of you, infer anything about you, or make automated decisions about you;
- sell, rent, or share your personal information (see section 10).
3. Your location
This is the only sensitive permission either version of SF Thrifts ever asks for, so it is worth being exact about.
What happens
When you tap the location button, your device asks you for permission. If you allow it, your device determines your position and the map draws a dot on it, so that you can see which shops are near you. That is the whole of the feature.
Where that location goes
Nowhere. Your coordinates are used by the map on your own device to place a dot and to centre the view. They are not transmitted to us, not written to any database, not attached to any request, and not stored on your device after you close the app or the page. We could not tell you where you have been, because we never receive it.
The details
- It is optional. Declining costs you the blue dot and nothing else. Every shop, filter, photo and set of opening hours works exactly the same either way.
- Foreground only. The app requests permission to use your location only while you are actually using it. It does not request background location, and it cannot see where you are when it is closed or in the background.
- You can change your mind at any time, in iOS Settings → Privacy & Security → Location Services for the app, or in your browser's site settings for the website.
4. Information collected automatically
We do not collect anything about you deliberately. However, like every service on the internet, the computers that deliver this map to you necessarily see the requests you make to them. When your device asks for a page, a photo, a map tile or the shop list, the provider serving it receives, as an unavoidable part of the connection:
- your IP address;
- the file you asked for and the time you asked for it;
- your browser or app user-agent string, which identifies the general type of device and software.
These are handled by our providers as ordinary server logs and are used for delivering the service, security and abuse prevention. We do not read these logs to study individuals, we do not combine them with anything else, and we do not use them to build any profile of you. An IP address can be personal data under some laws, which is why it is disclosed here.
5. Information stored on your own device
Both versions keep a small amount of data locally so that the map is fast and works with a poor signal. This never leaves your device and is not readable by us.
- A copy of the shop list. The names, addresses, opening hours and photographs of the shops are stored on your device so the map still works underground, in a basement, or with no signal. This is information about shops, not about you.
- Your filters, in the web address. On the website, the shop or filters you have selected are written into the URL, so that you can bookmark a view or send it to a friend. This is a convenience feature and contains nothing personal.
Clearing your browser data, or deleting the app, removes all of this. The website does not use cookies for advertising, analytics or tracking.
6. The companies that help run this
We use a small number of well-known providers. They are listed here because they may receive the technical information described in section 4 in the course of doing their job. None of them receives your location, and none of them is given permission to use anything for their own advertising purposes.
| Provider | What it does | Where |
|---|---|---|
| GitHub Pages | Serves the website | Website |
| Supabase | Stores the shop list and shop photographs, and delivers them to your device | Both |
| Mapbox & OpenStreetMap | Supply the map imagery the shops are drawn on | Website |
| Apple Maps | Supplies the map imagery inside the iPhone app | App |
| Apple | Distributes the app through the App Store, and gives us anonymous aggregate download and crash statistics that cannot identify you | App |
Each of these has its own privacy policy governing what it does with the connection information it receives.
7. Links to other places
A shop's card may link out to Google Maps for directions, or to the shop's own website, Instagram or TikTok. Following one of those links takes you off SF Thrifts and onto a service we do not control and are not responsible for. Once you are there, that company's privacy policy applies, not ours.
8. The shop information itself
The map contains business information: shop names, street addresses, opening hours, public phone numbers, public ratings and photographs of shopfronts. This is information about businesses, which are open to the public and have chosen to publish it. It is not personal information about you.
If you own or run a shop on this map and would like a detail corrected or your shop removed entirely, write to us at the address in section 13 and we will do it.
9. Children
SF Thrifts is a shopping map intended for a general audience. It is not directed at children under 13, and we do not knowingly collect personal information from anyone, of any age. Since the service has no accounts and no way to submit information to us, there is nothing for a child to disclose.
10. If you are in California
Under the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information is collected about you, to have it deleted, to correct it, and not to be discriminated against for exercising those rights.
We can answer the first one here, for everyone at once: apart from the connection information described in section 4, which our providers handle automatically as part of delivering the service, we do not collect personal information about you at all. We hold no profile, no identifier, and no record connected to you, so there is nothing for us to look up, correct or delete on request.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either, and we do not collect the sensitive personal information categories the CPRA defines.
11. If you are in the UK or the European Economic Area
Where the UK GDPR or EU GDPR applies to the limited processing described above, our legal bases are:
- Legitimate interests (Article 6(1)(f)) for the server log information in section 4, whose purpose is to deliver the map securely and keep it working. We consider this proportionate because it is the minimum any web service must handle, and it is not used to identify or profile anyone.
- Consent (Article 6(1)(a)) for your location, which is requested by an operating-system prompt you can refuse or later withdraw at any time in your device settings.
You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your local supervisory authority. Because we hold no information that identifies you, a request under most of these will honestly be answered "we have nothing about you", and we will say so promptly.
12. Retention, security and changes
We retain no personal information, so there is no retention period to state. Our providers keep their own operational logs for their own limited periods, in line with their policies.
All connections to the website, the app and our data are encrypted in transit using HTTPS. No method of transmission over the internet is perfectly secure, but there is very little to protect here, because the service is designed not to hold anything about you in the first place.
If this policy changes, we will update the "last updated" date at the top of this page. If a change is significant — for example, if a future version of the app began collecting something it does not collect today — we will make that clear here before the change takes effect, and where the law requires it we will ask for your consent.
13. Contact
Questions about this policy, requests about your information, or corrections to a shop listing: hi@usedisco.io
reWearwolf, San Francisco, California, USA.