Privacy Policy
Privacy Policy
Version 2026-09-29 · in effect from Sep 29, 2026
Remnant collects the information it needs to run a marketplace for print advertising: who you are, what you list or book, the payment records behind each order, and a record of the terms you agree to. This policy says what that is, where it goes, and how to ask us about it. It covers remnant.sale, the publisher console, and the services behind them.
1. What we collect
- Account details: your name and email address, provided when you sign in through Auth0, and whether your account is a buyer or a publisher account.
- Business details you enter: for buyers, campaign names, budgets and dates; for publishers, publication profiles, circulation and audience figures, inventory, prices and terms, and the documents you upload, such as media kits, spec sheets, sample editions and proof of publication.
- Order records: what was booked, when and for how much, its status, what each side recorded about it, and the insertion order generated for it.
- Payment records: the identifiers Stripe returns for checkouts, charges, refunds, transfers, disputes and payouts. Remnant never receives or stores card numbers; payment details are entered on Stripe's pages.
- Records of what you agreed to: which version of which document you accepted, when, and from which IP address and browser. We keep these as evidence of the agreement.
- Technical records: server logs with request identifiers, IP-based rate limiting, and error reports. We do not run advertising trackers or analytics cookies.
2. How we use it
- To run the marketplace: showing listings, creating orders, taking payment, paying publishers, issuing insertion orders, and emailing both sides about their orders.
- To operate the service: reconciling records with Stripe, reviewing claims about bookings, investigating errors, preventing abuse, and answering support requests.
- To communicate: transactional email about your orders, your account and changes to our terms. We do not send marketing email; if that changes, it will be opt-in.
3. What buyers and publishers see of each other
When an order is paid, the buyer's contact details are shared with the publisher, and the publisher's with the buyer, so that the placement can be arranged. The insertion order sent to both names both parties.
4. Who processes it
We use a small number of providers to run Remnant. Each receives only what its function needs:
- Auth0 (authentication and sign-in).
- Stripe (payments, payouts to publishers, refunds and disputes).
- Postmark (transactional email) and Zoho Mail (our support and notification mailboxes).
- Vercel (hosting the marketplace and console), DigitalOcean (hosting the API and database), and Cloudflare (DNS, and the storage and delivery of uploaded files).
- Sentry (error reporting, configured to exclude request bodies, cookies, authorization headers and IP addresses).
We do not sell personal information.
5. Cookies
Remnant sets one session cookie so that you stay signed in across remnant.sale and its subdomains, and stores your cart in your own browser. There are no third-party tracking cookies.
6. How long we keep it
- Account and listing data: for as long as your account is open.
- Order, payment and agreement records: kept after an account closes, because they are the financial and contractual record of completed transactions and may be needed for tax, accounting or dispute purposes.
- Checkouts that were never paid: these are not transactions, so they are not kept. One you leave or release, or that expires, is deleted about 30 days after it ends.
- Server logs: rotated on a short cycle and not kept long-term.
7. Your choices and rights
- You can see and edit most of your data in the marketplace or the console.
- You can ask us to correct, export or delete your personal data by writing to support@remnant.sale. Where a record must be kept (see section 6), we remove or anonymize the personal details attached to it rather than the transaction itself.
- Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA. The same address is the way to exercise them.
8. Children
Remnant is a business-to-business service and is not directed at anyone under 18.
9. Changes
Each version of this policy is dated and kept at remnant.sale. We tell account holders about material changes by email before they take effect.
10. Contact
Privacy questions and requests go to support@remnant.sale. See also the Terms of Service.