Your browsing, explained plainly.

Data handled by this site

The catalogue may require login while private editing mode is enabled. Account authentication is handled by Supabase. The website stores encrypted session tokens on the server and an opaque login cookie in your browser. Search terms and page requests are sent to this site's server to return pages. The operator should document any server logs, retention periods, hosting providers and security monitoring here: [OPERATOR: complete with verified details].

Storage in your browser

Authentication uses HttpOnly cookies for login, short-lived email confirmation/password recovery, and temporary feedback notices. Feedback notices contain only an encrypted predefined notice code, not your submitted details. The site uses browser local storage for the welcome-dialog dismissal and the haul basket, including purchase progress. For guests these values remain in your browser. When signed in, the haul and progress are saved with your PartLark account and follow you across devices; items saved before signing in are moved there. Deleting your account deletes the account-saved haul. If you report a problem with a listing, the report (reason, optional details you type, the reported item, time) is stored with your account id so we can review it; no IP address or browser details are kept with it. Reports are kept after account deletion for moderation history, but are no longer linked to you. Neither is a Superbuy order. Currency conversion may also retain a recent exchange rate in browser storage. Your cookie choice is remembered in a first-party cc_cookie cookie for six months; you can change it any time via "Cookie settings" in the footer. With your consent, Google Tag Manager loads configured analytics tags, which may use cookies and send usage information to Google. Clearing browser data may remove local preferences and guest baskets and log you out.

Third-party services and links

When enabled, the Login and Signup pages load hCaptcha to protect authentication from automated abuse. hCaptcha processes information under its Privacy Policy and Terms of Service; the challenge token is forwarded to Supabase Auth for verification. The htmx library is served from PartLark itself, and currency conversion may request exchange-rate data from Frankfurter. Product images are served from marketplace listing image hosts. Following marketplace or Superbuy links takes you to third-party services, which have their own privacy policies and may collect information. Superbuy links may be affiliate links.

Purpose, legal basis and rights

[OPERATOR: identify the data controller, purposes, lawful bases, applicable retention, user rights and supervisory authority using the actual jurisdiction and practices.]

Contact and updates

Privacy questions: [OPERATOR: add monitored privacy contact]. Last reviewed: [OPERATOR: add date].