Privacy Policy

Who runs LockerHunt

LockerHunt is operated by Get On Domain LLC. We provide tools for researching storage auctions. For privacy questions, corrections or requests, email [email protected]. We may ask you to verify control of your account before acting on a request.

What we collect, and why

• Your account: email, a password hash, verification and account dates, plan and trial dates, and the version and date of accepted terms. These let us authenticate you and provide your plan. We do not store your readable password.
• Your workspace: optional ZIP, radius, cost assumptions, ranking rules, saved or hidden units, favorite storage locations and viewed-unit timestamps. These personalize your results. We use ZIP centers for approximate distance, not your device's precise location.
• Your alerts: names, criteria, delivery frequency, matched unit IDs, delivery status and bounce/complaint blocks. These send the auction emails you explicitly enable. Alerts use your verified account email. Pause them from My alerts or the confirmation link in any alert email.
• Early access and support: waitlist email and optional ZIP, plus messages you send to support, so we can respond to your request.
• Security and delivery: IP addresses, request metadata, short-lived email-token digests, and mail delivery events. These protect the service, troubleshoot problems and deliver requested account messages.

Public auction descriptions, photos and bid information come from auction sources and are shared research data, separate from your private workspace. AI analysis uses auction content; account passwords, email addresses and personal preferences are not sent to the vision worker for analysis.

Cookies and services that receive data

We use an essential signed session cookie for login and form security, lasting up to 14 days. Logging out clears it. Blocking it prevents account features from working. We do not use account data for targeted advertising or sell it.

AWS hosts the application and Amazon SES sends account email. Cloudflare handles traffic and security. Those providers process data needed for those functions, including network or delivery metadata. Auction image hosts receive normal browser requests, such as IP and browser information, when their resources load. Opening the location map loads map tiles from OpenStreetMap, which receives your IP address, browser information and our site origin with those tile requests. Your account identity and favorites are not sent to the tile provider. Links to original auctions take you to independent sites with their own policies. Data may be processed in the United States.

Verification and password recovery messages are sent when requested. They do not enroll you in marketing. Any later promotional mailing needs its own subscription and unsubscribe process. We may disclose information when legally required or necessary to protect the service and its users.

How long we keep information

• Private deep research requests, reports and monthly usage are part of your account data and included in export and deletion. They stay while your account is open. Account and workspace information stays while your account is open. Ending the Pro trial does not delete your saved units or account.
• Alert criteria and delivery history stay until you delete the alert or account. Ending Pro pauses alerts without deleting them. Alert email verification links expire after one hour. We retain delivery blocks until resolved or the account is deleted.
• Expired account-link records are removed by daily maintenance after seven days beyond expiry. Verification links expire after 24 hours; password recovery links after 20 minutes.
• Deleting an account removes its live data immediately. Restricted recovery backups expire within 30 days. A separate opaque deletion fingerprint is retained for up to 32 days to prevent restoration of a deleted account, then removed. It contains no readable email or password.
• Request/security logs are kept for up to 30 days. Support correspondence is kept for up to 90 days after resolution. Waitlist information stays until early-access contact is complete or you request removal.

A specific legal obligation or active security investigation may require limited information to be held longer. Access is restricted to that purpose. We do not restore account data from an expired backup or use backups to bring back a deleted account.

Your controls

Update your ZIP and cost preferences in your account. From Your data & account, download your information as JSON or permanently delete your account after confirming your password. See what deletion includes. For waitlist-only removal, mailbox access problems or other privacy rights available where you live, contact [email protected].

LockerHunt accounts are for adults aged 18 or older. If you believe a child provided personal information, contact us so we can investigate and remove it. We will publish policy updates here with a new version date and notify account holders of material changes before they take effect where required.