Privacy Policy.

The controller of your personal data is [legal company name], registered in Israel under number [company number], at [registered address] (“Reborn”, “we”).

For any question about this policy, or to exercise the rights in clause 8, write to privacy@reborn.market.

When you open an account: your email address and a password, which is stored only as a hash and is never readable by us. We generate a random username for you. You may add a display name, a short bio and an avatar; none of the three is required, and none has to resemble your real name.

If you sign in with Google instead: Google sends us your email address, your name and your profile photo, and there is no password. Your name and photo stay in the sign-in record that Google sign-in needs and are never shown on Reborn: other members see your username and generated avatar, as for every account.

If you turn on two-factor authentication: a secret shared with your authenticator app is stored with your account, so that the codes it shows can be checked. It is deleted when you turn two-factor off.

When you list an item: the title, description, category, condition, price, the city you select, and your photographs. Photographs are resized on your own device before upload, which also removes the metadata cameras attach — including the GPS coordinates of where the picture was taken.

For premium sneakers: if you choose to provide them, additional close-up photographs and a proof of purchase. These are stored in a private location, are not published on your listing, and are not readable by other members.

As you use the service: the items you favourite, the questions you ask or answer, your orders, and the alerts generated for you.

What we do not ask for: your phone number, your street address, your identity document or your date of birth. The service is built so that these are not needed to buy or sell.

To operate your account and show your listings (performance of our contract with you). To check every listing before publication and keep prohibited content off the platform (our legitimate interest, and yours, in a marketplace that is not a fraud channel). To keep records of transactions for the period Israeli accounting and tax law requires (legal obligation).

We do not sell your data, we do not share it with advertisers, and we do not build advertising profiles.

Every listing is read before it is published. The check is performed by an automated system, and this means the title, the description and the photographs of the listing are transmitted to Anthropic, which provides the model that performs it. The check looks for attempts to move the deal off the platform, for prohibited goods and for counterfeits. Its verdict is stored with your listing.

A listing may be held back or refused as a result. That is a decision with an effect on you, and you have the right to contest it and to ask for a person to review it — write to the address in clause 1, and a person will look at the listing and answer you.

Filling in a listing from its photos. When you add photos to a new listing, they are also sent to Anthropic so that the details of the listing can be suggested to you: its category, brand and model, the size and reference printed on a label, colour, material, a condition and a short description. Nothing is published from this until you have checked the details and confirmed them. The photos are read for this and not kept for it; the ones you publish are stored with your listing, as for any listing.

Anthropic processes this content on our behalf and, under its commercial terms, does not use it to train its models. Your account details, your email and your private authentication documents are not part of what is sent.

Other members see what your listing shows: photographs, description, price, condition, city, and your username. They do not see your email, your real name, your address or your other listings’ private documents.

Supabase hosts our database, our file storage and our authentication. Data is stored on its infrastructure in Frankfurt, Germany, in the European Union. The site itself runs on Vercel, in the same region.

Anthropic receives listing content for the check, and the photos of a new listing for the suggestions, described in clause 4.

Google, if you choose to sign in with it, learns that you signed in to Reborn. It receives nothing about what you do here.

HaveIBeenPwned receives the first five characters of a cryptographic hash of a password when you choose one, so we can warn you if it has appeared in a known breach. The password itself, and the rest of the hash, never leave your device — the service cannot tell what you typed, and it is not told who is asking.

Some of these providers are located outside Israel. Where they are, transfers rely on the safeguards in their data-processing terms.

A published listing stays visible for 14 days and is then marked expired; it remains in your account afterwards so you can relist it. Order records are kept for the period required by Israeli tax and accounting law. Everything else is kept while your account is open.

When you close your account we delete your profile, your listings, your photographs, your questions and your alerts. Records attached to a completed transaction are retained for the period referred to above, because the law requires it of both of us.

Reborn uses only what is needed to keep you signed in and to remember your language and display preferences. There are no advertising cookies and no third-party analytics. The full list is here.

Under Israel’s Protection of Privacy Law you may ask to see the data we hold about you, to have it corrected, and to have it deleted. If you are in the European Union, the GDPR additionally gives you the right to receive your data in a portable form, to restrict or object to certain processing, and to lodge a complaint with your supervisory authority.

Write to the address in clause 1. We answer within 30 days. We will not ask you for an identity document to prove who you are; being able to sign in to the account is the proof.

Access to data is enforced by the database itself rather than by the application, so a mistake in our code cannot hand one member another member’s rows. Private documents live in storage that is not publicly readable. Passwords are checked against known breaches when chosen and are stored only as hashes.

No service can promise that a breach is impossible. If one occurs and puts you at risk, we will tell you and the regulator, and we will tell you what was affected.

Reborn is not for people under 18. If we learn that an account belongs to a minor we close it and delete the data attached to it.

If we change this policy we will update the date at the top, and where the change matters we will tell you in the app before it takes effect.