Privacy Policy

Mr. Hammy's Hand Me Downs

Last updated: June 22, 2026

This Privacy Policy explains how Mr. Hammy's Hand Me Downs ("Mr. Hammy's," "we," "us") collects, uses, shares, and protects information when you use MrHammys.com and related features (the "Platform").

1. Information We Collect

Account information. Name, email address, password (encrypted), and profile details you provide when registering, including via Google OAuth sign-in.

Listing and transaction information. Item descriptions, photos, prices, shipping addresses, and order history for items you buy, sell, or donate.

Family Sponsorship Program information. If you create a family profile (as a Seeker Family) or participate as a Sponsor, we collect information such as your child's age in months, gender (optional), sizes needed, and a wishlist of categories. This information describes the needs of a household, not personal information collected from or about a child directly — it is entered and controlled by the adult account holder. You choose your profile's visibility level (anonymous, partial, or full), which controls what other users can see (Section 6).

Payment information. Payment card and bank account details are collected and processed directly by Stripe (our payment processor) — Mr. Hammy's does not store full card or bank account numbers on our own servers. We receive limited transaction metadata from Stripe (e.g., amount, status, payout confirmation).

Shipping information. Addresses and package details are shared with EasyPost to generate shipping labels and tracking numbers.

Communications. Messages between buyers/sellers and sponsors/families sent through the Platform, and emails we send via Resend (order confirmations, shipping updates, credit expiration reminders, referral notices).

Usage and device information. IP address, browser type, device identifiers, pages viewed, and similar analytics data, collected automatically via cookies and tools like Google Analytics.

Cookies and advertising identifiers. See Section 5 (Cookies and Advertising).

2. How We Use Information

We use the information above to:

• •Operate the marketplace (listings, checkout, payouts, shipping labels, order tracking)
• •Operate the Family Sponsorship Program (matching, first-refusal notifications, donation tracking, Mr. Hammy Credits accounting)
• •Send transactional and account-related emails
• •Detect and prevent fraud, abuse, and prohibited listings
• •Comply with legal obligations, including marketplace facilitator tax reporting where applicable
• •Improve the Platform through aggregated analytics
• •Serve advertising, including through Google AdSense (Section 5)

We do not sell your personal information to third parties for money. Where required by state law (e.g., California), certain data sharing for advertising purposes may be considered a "sale" or "share" under that law's definition — see Section 8 for your rights.

3. Children's Privacy (COPPA)

Mr. Hammy's is not directed at children, and account registration requires that you be at least 18 years old. We do not knowingly collect personal information directly from anyone under 13.

Information describing a child (such as age in months, sizes, or gender preference in the Family Sponsorship Program) is provided by the adult account holder about their household's needs — it is not collected from the child, and the child does not interact with the Platform. If we learn that a child under 13 has created an account or submitted information directly to us, we will delete that information and the associated account promptly. Parents or guardians who believe their child has provided us information directly can contact us at Support@mrhammys.com to request deletion.

4. How We Share Information

We share information with:

• •Other users, as necessary to complete a transaction, donation, or sponsorship (e.g., shipping address shared with a seller, listing details shared with a buyer, profile info shared per your chosen visibility level)
• •Service providers who process data on our behalf, including:
• •Stripe (payments, identity verification, payouts)
• •Supabase (database, authentication, file storage)
• •EasyPost (shipping labels and tracking)
• •Resend (transactional email delivery)
• •Vercel (website hosting)
• •Google (OAuth sign-in, Analytics, AdSense)
• •Legal and safety purposes — to comply with law, respond to legal process, investigate fraud or recalled-item reports, or protect the rights and safety of users and the Platform
• •Business transfers — if Mr. Hammy's is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this Policy

5. Cookies and Advertising

We use cookies and similar technologies for:

• •Essential functions — keeping you logged in, remembering cart/checkout state
• •Analytics — understanding how the Platform is used (Google Analytics)
• •Advertising — Google AdSense uses cookies and similar technologies to serve ads, which may be personalized based on your visits to this and other sites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our Platform and/or other sites on the Internet.

You can opt out of personalized advertising through Google's Ad Settings, the Digital Advertising Alliance's opt-out page, or by adjusting your browser's cookie settings. If you are visiting from the EU/UK, you will be shown a cookie consent banner that lets you accept or decline non-essential cookies before they are set.

Declining cookies may limit some Platform functionality.

6. Family Sponsorship Privacy Controls

If you create a Seeker Family profile, you choose one of three visibility levels:

• •Anonymous — only your city is shown to potential sponsors
• •Partial (default) — first name and city are shown
• •Full — full name, photo, and city are shown

You can change this setting at any time from your account dashboard. Sponsors only see the visibility level you've selected, and a Sponsorship request must be accepted by you before any donation or first-refusal relationship begins. You can decline any request and end an active sponsorship at any time.

7. Data Retention

We retain account and transaction information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations (typically at least 7 years for transaction records). If you close your account, we delete or anonymize personal information that is no longer needed, except where retention is required by law or for legitimate business purposes such as fraud prevention.

8. Your Rights and Choices

Depending on where you live, you may have the right to:

• •Access, correct, or delete the personal information we hold about you
• •Opt out of the "sale" or "sharing" of personal information for targeted advertising (applicable to California and other state residents under laws such as the CCPA/CPRA)
• •Request a copy of your data in a portable format
• •Withdraw consent for cookies (Section 5)

To exercise any of these rights, contact us at Support@mrhammys.com. We will verify your identity before fulfilling requests involving account data.

If you are located in the EU/UK, you may also have rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted connections (HTTPS), encrypted password storage, and access controls on our database. No system is 100% secure, and we cannot guarantee absolute security of information transmitted to or stored on the Platform.

10. International Users

The Platform is hosted in the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the updated version with a new "Last updated" date and, for material changes, provide additional notice (e.g., email or in-app banner).

12. Contact Us

Questions about this Privacy Policy or your data? Contact us at Support@mrhammys.com.