thrift.wevan.ca Privacy Policy
Last updated: August 7, 2026. In case of any conflict or ambiguity between this English version and any translated version of this page, this English version governs.
This page is not legal advice, and thrift.wevan.ca is not a law firm. It describes, in plain language, what personal information this site collects, why, and what rights you have over it. It is reviewed periodically but individual circumstances vary; if you have a specific legal concern, consult a lawyer licensed in British Columbia.
Who operates this site. thrift.wevan.ca is an individually-run personal secondhand/marketplace site operated from British Columbia, Canada. This policy applies to thrift.wevan.ca and to its account/messaging system (technically a separate service, auth-pb.wevan.ca, that the site uses for login and messaging — from your perspective as a user, it's one product, and this policy covers all of it).
What we collect, and why:
| What | Shared with whom | Why we collect it | Risk if mishandled |
|---|---|---|---|
| Email address, display name, and profile photo (from your Google account, when you sign in with Google) | Never shown to other users. Used internally to identify your account and, for your display name specifically, shown to other users only until you set a username (see below) — after that, your chosen username is shown instead. | Required to create and secure your account; Google OAuth is currently the only way to sign in to thrift.wevan.ca. | If your account is compromised, whoever has access could see this. We don't store your Google password — Google handles that. |
| A username you choose | Shown to buyers/sellers you exchange messages with, in place of your real name. | Lets you have conversations without exposing your real name to someone you're transacting with but may never meet. | Choose something you're comfortable being publicly associated with your listings/messages. |
| Your first and last name | Never shown to other users, under any circumstance. Visible only to you and, if genuinely necessary (see below), the site operator. | (1) To personalize features like email notifications ("Hi [name], you have a new message") instead of a generic greeting. (2) As an accountability backstop: because your username can be anything, if a real dispute or suspected scam involving a specific transaction needs to be investigated or escalated (including, in a serious case, to police), having a real name on file gives us something to work with beyond an unverifiable handle. We do not use this for marketing, profiling, or anything unrelated to these two purposes. (A possible future use we're disclosing now rather than waiting: if the site ever adds real shipping or invoicing, your name could be used for that — but that feature doesn't exist today, and we'd tell you again, specifically, before repurposing your name for it.) | Same as above — compromise risk. This is exactly why we don't show it to anyone but you, unlike your username. |
| Messages you send through the site | Shown to the person you're messaging. May be reviewed by the site operator if needed to investigate a report of fraud, harassment, or abuse — see "Message review" below. | To let buyers and sellers communicate. | Anything you send in a message is visible to the person you send it to; don't include information in a message you wouldn't want that person to have. |
| Your language preference (stored in your browser only, not on our servers) | Not shared — never leaves your browser. | So the site remembers which language you last viewed it in. | Minimal — this is a browser-local setting, not account data. |
What we don't do. thrift.wevan.ca does not use cross-site tracking cookies for advertising purposes.
Local personalization ("Recommended for You"). The site locally records — in your own browser's localStorage, never transmitted to any server — which product categories you browse or favorite. This data is used solely to power a "Recommended for you" section on the homepage. This does not contradict the "no tracking" statement above: it is neither third-party tracking nor an analytics script, but a purely local personalization feature. You can disable it at any time via the Personalization toggle in the cookie banner at the bottom of the page; once disabled, the section will not appear and no further browsing data will be written.
Aggregate Usage Analytics (PostHog). This site uses PostHog to collect aggregate usage data (such as which pages are visited most or which features are clicked) to help us improve the site. We collect aggregate pageviews and click events, but not session recordings, and not the content of any forms or messages you type. PostHog is a cloud service hosted outside of Canada, meaning your aggregate usage data may be processed across borders. You can opt out of this tracking at any time via the Analytics toggle in the cookie banner at the bottom of the page.
Message review. We may look at the content of a specific reported message, and that sender's recent message pattern, if needed to investigate a report of fraud, harassment, spam, or abuse — never for any other reason (like general browsing of everyone's messages, or marketing purposes). If you report a message to us, that itself is treated as your consent for us to look at it in order to act on your report. If we're actively investigating a specific bad-faith account, we generally won't tip that account off in advance that we're doing so — telling them ahead of time would usually defeat the point of the investigation.
How long we keep things. Account information is kept as long as your account exists. Messages are kept indefinitely by default (so both sides of a conversation have a record of it), unless you delete your account (see below). Records created specifically to document a fraud/abuse investigation are kept only as long as reasonably needed for that purpose, generally no longer than is useful for resolving a related dispute.
Your rights over your information.
- Access & correct: You can view and edit your username, first name, and last name at any time from your Profile page. If something here is wrong, fix it yourself, any time — you don't need to ask us.
- Delete: You can delete your account and the personal information tied to it from your Profile page. Deleting your account does not retroactively delete messages you've already sent to other people — those remain part of the conversation history on the recipient's side, the same way deleting a text message from your own phone doesn't delete it from the other person's phone.
- Ask us questions: If you have questions about what we hold about you or why, contact us using the contact information available at the bottom of the page.
Where this data lives. Your account and message data is stored on infrastructure operated by the site owner, in the same general setup already used for the rest of thrift.wevan.ca's technical operations.
Changes to this policy. If what we collect or why materially changes, we'll update this page and, for a real "just-in-time" example of what we mean, do the same thing we do at signup — tell you specifically, at the point it becomes relevant, not just quietly change this page and hope you re-read it.