last updated 21/07/2026 · applies to getgarage.com.au
we know your email, your display name, a suburb, and whatever you choose to list or say in chat. we don’t know your address. we never see the location data your camera buries in a photo, because that gets stripped before anything leaves your device. one behavioural thing does get kept: the last couple of dozen listings you opened, so “recently viewed” works on any device. it’s private to you and it feeds nothing else. none of this is ever sold, and none of it is shared with anyone. no ad trackers. no social buttons phoning home. we do count page views and time how fast pages load, but cookielessly, so none of it can be tied back to you.
first-party only: one to keep you logged in, one for your browse suburb, one that carries a notice across a page change (lives about five seconds). your light/dark choice sits in your browser’s local storage. there is nothing to “accept” because none of them track you.
the database and photo storage run on Supabase in Sydney. the site is served by Vercel. both act only as infrastructure, processing data on our instructions and never using it for their own purposes. transactional email (confirmations, password resets, notifications) goes out through Resend, whose servers for us sit in Tokyo, so your email address travels there to be sent.
when someone messages you or makes an offer, we send one bundled email. at most every fifteen minutes, never one per message. it carries a short excerpt so you can tell what’s worth opening, which does mean that excerpt travels through Resend and then sits in your mail provider’s inbox like any other email. if you’d rather it didn’t, every category can be turned off in settings, and every email has a one-click unsubscribe that works without logging in. orders (paid, posted) get their own emails because money’s involved. we don’t track opens or clicks, and there are no tracking pixels in any of it.
when the site hits an error, a crash report goes to Sentry so we can find it and fix it. that report carries the error, where in our code it happened, and your browser and operating system. it does not carry your email, your IP address or your cookies, and it drops everything after the “?” in a web address, since that is where identifying details tend to hide. all of that is stripped before the report leaves your device. there is no session recording, so a report only exists when something has actually gone wrong. Sentry stores these in the United States.
to know the site is being used and staying quick, we use Vercel Web Analytics and Speed Insights, from Vercel, who already host us. they count which pages get visited, roughly which country the visit came from and what kind of device it was on, and they time how fast pages load and respond. all of it comes back in aggregate. no cookie is involved, there is no cross-site identifier and no fingerprint, so a page view cannot be tied back to you or followed from one site to the next. Vercel processes it on our instructions, the same as it serves the site.
the suburb picker searches a list we host ourselves, so your keystrokes never go to a third-party maps service. that list is built from the Geocoded National Address File (G-NAF): incorporates or developed using G-NAF © Geoscape Australia, licensed by the Commonwealth of Australia under CC BY 4.0.
when a buyer pays through Garage, the payment is handled entirely by PayPal: card details, PayPal balances and the delivery address all stay with PayPal, under PayPal’s privacy policy. money moves directly from buyer to seller, and Garage never holds funds. we keep the sale record (item, amounts, status) but never your card or your address. the seller sees the delivery address you chose at PayPal, fetched from PayPal only while the order is open.
settings → danger zone, any time, self-service. your listings come down, your personal details are scrubbed, and your login is destroyed. reviews you wrote and chats you were part of remain for the other person’s sake, attributed to “deleted user”.
“we” is Garage Marketplace Pty Ltd (ABN 69 700 370 172), and we handle personal information in line with the Australian Privacy Principles. you can access or correct what we hold about you (most of it is right there in settings), and you can complain. first to us, then to the OAIC if we don’t sort it out.
hello@getgarage.com.au. a human reads it.
if this policy ever changes in a way that matters, we’ll say so plainly on the site. we won’t bury it in a diff.