OshiTradePrivacy Policy
1. Who we are
OshiTrade is published by Eric Z (“we”). Contact: candy66861@gmail.com.
2. Data that stays with you
- Your collection, trades, the other person’s handle, amounts, tracking numbers, meetup plans, photos, notes and settings are stored in the app on your device. We never receive them.
- iCloud sync (on by default, can be turned off in Settings) stores a copy in your own private iCloud database, managed by Apple under your Apple Account. We cannot read it.
- Shipping address notes you type for a trade are kept separately, are never included in search, CSV exports, statistics or logs, and are deleted automatically after the trade is finished or cancelled (after 7 days by default; you can change this).
- Images, text and backups you share or export go only where you send them. Exported images contain no location or camera metadata.
3. Data we collect
3.1 Anonymous usage statistics (you can turn this off)
We record events such as “trade created”, “item marked as sent” or “trade image shared”, with coarse details such as the trade type, a count range, the shipping region or the image template. Each event includes a random installation ID created by the app (it changes if you delete and reinstall the app), app version, iOS version, device model, language, region and time zone.
We never collect the content you enter: no item, series or fandom names, handles, tracking numbers, addresses, notes, post text, photos or search terms. We do not collect your name, email address or the advertising identifier (IDFA), and we do not link statistics to your identity.
Purpose: learning which features are used so we can improve the app. Switch it off at any time in Settings (“Share anonymous usage statistics”): the app stops sending its own events right away, and the analytics SDK stops completely the next time the app starts. Raw events are kept for 90 days; daily totals without any ID are kept for 400 days.
3.2 Crash reports
If the app crashes, Firebase Crashlytics (Google) receives a crash report: stack trace, app version, iOS version, device model, free memory and storage, and a Crashlytics installation ID. We use it only to fix bugs. You can turn crash reports off together with usage statistics.
3.3 Diagnostic logs
The app keeps a short technical log on your device (for example a failed save or sync status) for up to 7 days. It never contains what you entered. Only when we investigate a problem — usually one you reported — can we ask the app to upload this log for a specific installation ID. Uploaded logs are deleted within 90 days. Once usage statistics are turned off, no logs are uploaded from the next time the app starts.
3.4 Network data
When the app sends statistics or logs, our hosting provider Cloudflare processes your IP address to deliver the request and protect against abuse. We do not store IP addresses.
3.5 Purchases
Payments are handled by Apple. We never receive your payment details or Apple Account. The app checks your purchase on the device. Anonymous statistics record that a purchase or restore happened, with the price and currency.
3.6 Support email
If you email us, we receive your email address and what you write. We use it only to answer you and keep support emails for up to 2 years.
4. When you open other services
When you tap “Track”, OshiTrade opens the carrier’s tracking page in your browser with the tracking number; when you tap a handle, it opens that profile in the social app or browser; when you search for a meetup place, the search is handled by Apple Maps. These services receive what they need under their own privacy policies. OshiTrade does not send them anything else.
5. What we never do
- No advertising and no ad SDKs.
- No tracking across other companies’ apps or websites, no IDFA.
- No selling or renting of data, no data brokers, no profiling.
- No marketplace, messaging or contact between users.
6. Permissions
- Camera — only when you photograph items or scan a tracking number. Photos and text are processed on your device.
- Photos (add only) — to save trade images you create. Photos you pick for items use the system picker, which gives the app only the photos you choose.
- Notifications — local reminders for meetups and deadlines, requested when you first set one.
- Clipboard — read only when you tap a Paste button (for example to paste an @handle or a tracking number).
OshiTrade does not ask for your location, contacts or microphone.
7. Service providers and international transfers
| Provider | What for | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Statistics server and this website | Usage statistics, diagnostic logs | USA and Cloudflare’s global network |
| Google LLC (Firebase Crashlytics) | Crash reports | Crash reports | USA |
| Apple Inc. | App Store, purchases, iCloud, Maps | Handled under Apple’s privacy policy | — |
Data may be processed outside your country. For users in the EEA, the UK and Switzerland, transfers rely on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses offered by these providers.
8. Legal bases (EEA, UK)
Usage statistics, crash reports, diagnostic logs and abuse protection: our legitimate interest in running and improving a reliable app (Art. 6(1)(f) GDPR); you can object at any time by turning statistics off. Support: your request (Art. 6(1)(b) GDPR).
9. Your choices and rights
- Turn off anonymous statistics and crash reports in Settings.
- Turn off iCloud sync in Settings, and export or delete your data at any time. Deleting the app removes the data on the device; data in your iCloud can be deleted in iOS Settings › [your name] › iCloud.
- Because we do not know who you are, we can only find server data by its installation ID. You can copy it in Settings and send it to us to request access or deletion.
- Depending on where you live (for example under the GDPR or California law), you may have rights to access, correct, delete, restrict or object to processing and to data portability, and to complain to your data protection authority. We do not sell or share personal information for targeted advertising.
10. Other people’s information
If you note down another person’s handle or shipping address, it stays in your app and your iCloud only. Please keep it only as long as you need it for the trade; the app deletes address notes automatically after the trade.
11. Children
OshiTrade collects no personal information from anyone, including children, beyond the anonymous data described above.
12. Security
All connections use HTTPS. We have no server that stores your collection, trades or personal data. This website uses no cookies and no third-party scripts.
13. Changes
We will update the date above when this policy changes and mention significant changes in the app’s release notes.
14. Contact
Eric Z · candy66861@gmail.com