Privacy Policy
Last updated October 7, 2026
Lizts keeps only what it needs to run your listings. No ads, no trackers, no selling or sharing your data. Your OfferUp passwords never leave your own computer, and you can download or delete everything at any time.
What Lizts keeps
| What | Why |
|---|---|
| Account: your email, name, password (stored only as a one-way hash), pickup ZIP code, and settings such as the last line added to your descriptions | To sign you in and to fill in your listings |
| Your items: titles, descriptions, prices, quantities, statuses, notes, OfferUp listing numbers and posting history | That's the app: your list of things to sell |
| Photos you add. They're shrunk and re-saved, and all hidden details, including GPS location, are removed before they're stored | To show your items and post them |
| Stock checks: the answers given and the name typed by whoever gave them | So you know what's still on the shelf and who checked |
| Devices: which browsers, phones and desktop helpers are signed in (a device name, when it was last used), the desktop helper's version and the names of the OfferUp accounts it can post with | So you can see and sign out your devices, and so posting goes to the right computer |
| Check with OfferUp: the titles and numbers of the listings on your OfferUp accounts, read by your computer | To show where OfferUp and Lizts don't match |
| Sign-in security log: each sign-up, sign-in, failed try and security change, with the time, the internet address, the rough place that address belongs to (city / state / country, looked up on our own server), and the device's name (browser and system, e.g. "Chrome on Windows 11", and a phone model when the browser tells it) | To spot sign-ins that aren't you (a new device, another country, impossible travel), ask for an extra code then, and show you your own recent activity |
| Device id: a random number your browser or phone keeps, so Lizts recognises it next time (we store only a scrambled form of it). Not a hardware or advertising id | So known devices aren't asked for a code every time |
| 2-step sign-in: if you turn it on, the authenticator app's key (stored encrypted) and scrambled copies of your recovery codes. Passkeys: only a public key; your fingerprint or face never leaves your device and Lizts never sees it | To check the extra codes and passkeys you sign in with |
| When you use Lizts: a count of requests per hour (not what you looked at) | Quiet-time planning for the service, and, if you leave "Personalize Lizts for me" on, sorting suggestions and tips for you |
| Other security records: the email and internet address of wrong passwords (deleted after one day), and the web server's standard access logs | To stop password guessing and keep the service safe |
What Lizts never collects
- Your OfferUp passwords or logins. They stay in the browser on your own computer. The desktop helper posts from there.
- Your GPS location, contacts, hardware (MAC) addresses, or anything else from your phone beyond the photos you choose. Places in the security log come only from your internet address and are approximate.
- Fingerprints, face scans or other biometrics. Passkeys check those on your own device.
- Advertising IDs. Lizts has no ads, no analytics, no tracking pixels and loads nothing from other companies' servers.
- Payment card numbers. Nothing is sold during testing; when paid plans arrive, payments will go through a payment company and Lizts won't see your full card number.
How your data is used
Only to run Lizts for you: to store and show your items, post them through your desktop helper, run your stock checks, and keep your account secure. If "Personalize Lizts for me" is on (Settings ▸ Privacy), we may also use when you use Lizts and what you list to sort suggestions and tips for you inside Lizts; turn it off at any time. Lizts does not sell your data, share it for advertising, or use your items or photos to train AI.
Who else handles it
Lizts runs on servers in the United States rented from InMotion Hosting, which stores the data on our behalf and isn't allowed to use it for anything else. Nobody else receives your data, unless the law requires it (for example a valid court order).
When you post, your desktop helper sends your listing to OfferUp from your own computer and account; what OfferUp does with it is covered by OfferUp's own privacy policy.
Cookies and storage on your device
Lizts uses two cookies: one keeps you signed in, the other holds this device's random id so we can recognise it next time you sign in. Both are only sent to lizts.com, can't be read by the page's scripts, and are never used for tracking or ads. Your device also remembers a few choices locally, such as the theme, the item view and your name for stock checks; they never leave your device.
How long it's kept
Your data is kept while you have an account. Wrong-password records are deleted after one day, the sign-in security log after about 13 months, and new accounts whose email was never confirmed after 7 days. When you delete your account, your items, photos, history and devices are removed from Lizts right away; copies in the hosting company's backups disappear as those backups are replaced on their normal schedule.
Your choices and rights
- See and change your data in the app at any time.
- Download it: Settings ▸ Your data gives your items as a spreadsheet file, or everything as one file.
- Delete it: Settings ▸ Delete account removes your account and everything in it, for good.
- California residents have the right to know what personal information is collected, to delete it, to correct it, and not to be discriminated against for using these rights. Lizts does not sell or share personal information, so there's nothing to opt out of. You can use these rights in the app or by emailing us.
How it's protected
Everything travels over encrypted HTTPS. Passwords, sign-in tokens and codes are stored only as one-way hashes. Sign-in attempts are rate-limited, new devices and unusual places are asked for an extra code, and you're emailed when a new device signs in. You can add passkeys and an authenticator app in Security. Pages follow strict browser security rules and run no outside code. Photos are served only to their owner. No system is perfectly secure, but we follow recognised standards (OWASP) and fix problems quickly.
Children
Lizts is for adults selling their own things; you must be 18 or older to use it. We don't knowingly collect information from children. If you think a child has given us information, email us and we'll delete it.
Changes
If this policy changes, the new version is posted here with a new date. For important changes we'll also tell you in the app or by email before they take effect.
Contact
Questions or requests: support@lizts.com.
IP geolocation by DB-IP (CC BY 4.0).