Privacy Policy
Last updated: September 2026 • Hyperlocal privacy by design
At BarterLocal, we believe neighborhood collaboration begins with trust and data dignity. We do not sell personal information, track you across third-party websites, or display advertising. This policy describes how we collect, handle, and safeguard your data.
Exact street addresses are never made public. Only your general area or neighborhood radius is displayed.
We do not sell, rent, or trade your contact details or swap history with third-party advertisers.
Manage your profile privacy levels, update contact visibility, or request complete account erasure at any time.
1Information We Collect
To provide mutual matchmaking and exchange coordination, we collect:
- Account Profile: Display name, email address, optional phone number, and avatar image.
- Hyperlocal Location: City, district, or neighborhood area name to match you with nearby neighbors.
- Listings & Proposals: Item descriptions, photos, skills offered, and exchange proposals you submit.
- Coordination Messages: Direct communication sent through private exchange chat rooms.
2Location Privacy & Visibility Controls
We protect physical privacy through granular controls available in your account settings:
- Area Visibility: Listings show your general locality (e.g. "Hayatabad, Peshawar") rather than specific home coordinates.
- Private Pickup Notes: Sensitive pickup details or exact landmarks are only revealed to the specific counterpart after a mutual exchange has been accepted and scheduled.
3Media & Storage Handling
Listing photos and user avatars uploaded to BarterLocal are stored via encrypted cloud object storage. We automatically strip sensitive EXIF GPS metadata from uploaded images before serving them publicly. When listings are deleted or drafts discarded, associated images are purged.
4Security Safeguards
We employ industry-standard security practices, including:
- Bcrypt hashing for user passwords (we never store plain-text passwords).
- Secure HTTP headers, rate limiting to prevent brute-force attacks, and JWT-authenticated sessions.
- Restricted role-based access for moderation personnel.
5Your Data Rights & Erasure
You maintain full ownership of your personal data. You have the right to request a complete export of your activity data or permanent account erasure. Upon account deactivation, public listings are removed immediately.
Have questions about how your data is handled? Contact our community team or review our Terms of Service.