Privacy

Hickra is operated by Hickra Golf LLC, 4611 E Chandler Blvd, Ste 112 #4220, Phoenix, AZ 85048, in Arizona, United States.

Questions about anything on this page: privacy@hickra.com. A person reads it.

Your email address. It is how you sign in, either with a code we email you or with a password you set yourself, and it is the only thing required to have an account. We also record which page you arrived from, when a link carries that, so we know whether anyone is finding us.

Whatever you choose to put on your profile.A display name, a handle, a short description, the rough area you are in, and a postal code if you give one. None of it is required. The area and the postal code are used to work out roughly how far a club is from you and to price a parcel; the postal code itself is never shown to anyone else, and the area is only ever an approximation like “Phoenix, AZ” — never a street.

What you tell SwingFit, if you fill it in: how you swing, how far you hit a 7-iron, your height and reach. It is used to show you why a club might suit you. You can leave every question blank.

What you list, and the photographs of it. Selling something means the listing, its specifications, and the pictures you take are public — that is the point of a marketplace. Photographs are stripped of camera location data before anyone sees them.

A delivery address, when you buy something, and only then. It goes to the seller who has to post the parcel, and to nobody else.

Page views, counted without cookies and without identifying anybody. We can see that a page was viewed. We cannot see that you viewed it.

Page views, counted without cookies and without identifying anybody. We can see that a page was viewed. We cannot see that you viewed it.

Cookies set by Hickra and read only by Hickra: one remembers your light or dark preference and anything you save while looking around, one remembers the answers you give SwingFit before you have an account, one holds a listing you are part-way through writing, and one keeps you signed in. They stay in your browser. Clearing them signs you out and removes anything not already saved to your account.

When you buy, we record the order: what you bought, what you paid, when it shipped, and the delivery address you gave. The address goes to the seller, because they are the one posting the parcel, and to the carrier. Your card number is not part of this — it goes from you to Stripe and never through Hickra.

If you save a card for next time, including through Stripe Link, it is saved with Stripe rather than with Hickra. We cannot see it and cannot charge it without you completing a checkout.

When you sell, Stripe verifies who you are before it will pay anyone — your name, date of birth, address, and part of a government identifier. That is a legal requirement on Stripe, collected on Stripe’s own pages. Hickra is told whether you are verified and nothing else. The same is true of the bank account or debit card you are paid into: we never see it.

If you offer local pickup, your listing shows an approximate area only. The exact address is exchanged between you and the other party once an order exists, and is never published.

• No advertising identifiers, no third-party advertising, no tracking pixels, and no cross-site profiling.
• No precise location. Nothing asks for your device's position, and Hickra never stores a street address except the delivery address you give when you buy something.
• No card numbers, bank details, or government identifiers. Payments and payouts run on Stripe's own pages, and none of that ever passes through Hickra — we see that a payment succeeded, the amount, and the last four digits on a receipt.
• No contacts, calendars, or files from your device. Photographs only ever come from a listing you chose to write.
• Nothing at all is sold, and nothing is shared for advertising. There is no arrangement under which that could happen.

To run the marketplace you are using. Your email signs you in — with a code we send you, or with a password if you have set one. Your orders exist so both sides can see what was agreed, so a parcel can be posted, and so a problem can be settled against what the listing actually said. Your listings are public because that is what a listing is.

And to email you about the things you did — a sign-in code, a receipt, a notice that something sold or shipped. If you gave us your address before Hickra opened, it is not used for anything now and we will not email it again.

Nothing here is used for advertising, profiling, or resale, and there is no arrangement under which it could be.

Five companies, each doing one job and none of them permitted to do anything else:

• Vercel — hosting and the cookieless page counting
• Supabase — the database everything is stored in
• Resend — sending email: sign-in codes, receipts, notices
• Stripe — taking payments and paying sellers. Card details go straight from you to Stripe and never reach Hickra; we never see or store a card number. Stripe also receives your email address for the receipt, and a seller setting up payouts gives Stripe the identity and bank details it needs to pay them — which Hickra does not see either.
• Shippo — checking where a parcel is. It receives the carrier and the tracking number the seller entered, and nothing else. No name, no address, no email.

We would also hand over information if the law required it. Nobody has ever asked, and there is very little to hand over.

Your account and what you put on it, until you ask us to remove it. The same goes for an address you gave us before Hickra opened, which is not used for anything.

Records of orders are kept even if you close your account, for as long as tax and accounting law requires. A completed sale is a transaction between two people and a tax record for both of them; it is not ours alone to delete. What goes when you close an account is your profile, your listings, and your contact details.

Wherever you live: tell us what you hold about me, correct it, delete it, or stop emailing me. Every email carries an unsubscribe link that works immediately, and you can write to privacy@hickra.com for anything else. We answer within 30 days and usually the same week.

These are not conditional on where you live. We would rather offer them to everybody than work out who can demand them.

You can sign in with a code we email you, or with a password you set. A password is never stored in a form anybody can read: our authentication provider keeps a one-way hash of it, so it cannot be turned back into your password by us or by anyone who obtained it. Everything is stored in a database whose access rules deny every read by default and are opened only for the rows that belong to you; no request from a browser can reach anyone else’s. Card numbers, bank details and identity documents are not in it at all, because they never reach us. Everything travels encrypted.

No system is perfect. If something happened that affected you, we would tell you directly rather than wait to be asked.

Hickra is not intended for anyone under 18, and we do not knowingly collect anything about them. If we learn we have, the account and what is on it are deleted.

This page changes when what we do changes, and the date at the top changes with it. Material changes — a new kind of data, a new company touching it, a new reason for having it — are posted here before they take effect, and we email you if you have an account.

If something here ever describes Hickra inaccurately, that is a mistake rather than a policy, and we would like to know: write to privacy@hickra.com.