Privacy Policy
Last updated October 9, 2026
Lizts keeps only what it needs to run your listings. No ads, no trackers, no selling or sharing your data. Your OfferUp passwords never leave your own computer, and you can download or delete everything at any time.
What Lizts keeps
| What | Why |
|---|---|
| Account: your email, name, password (stored only as a one-way hash), pickup ZIP code, and settings such as the last line added to your descriptions | To sign you in and to fill in your listings |
| Your items: titles, descriptions, prices, quantities, statuses, notes, OfferUp listing numbers and posting history | That's the app: your list of things to sell |
| Photos you add. They're shrunk and re-saved, and all hidden details, including GPS location, are removed before they're stored | To show your items and post them |
| Stock checks: the answers given and the name typed by whoever gave them | So you know what's still on the shelf and who checked |
| Devices: which browsers, phones and Auto-Lister apps are signed in (a device name, when it was last used), the Lizts Auto-Lister's version and the names of the OfferUp accounts it can post with | So you can see and sign out your devices, and so posting goes to the right computer |
| Check with OfferUp: the titles and numbers of the listings on your OfferUp accounts, read by your computer | To show where OfferUp and Lizts don't match |
| Sign-in security log: each sign-up, sign-in, failed try and security change, with the time, the internet address, the rough place that address belongs to (city / state / country, looked up on our own server), and the device's name (browser and system, e.g. "Chrome on Windows 11", and a phone model when the browser tells it) | To spot sign-ins that aren't you (a new device, another country, impossible travel), ask for an extra code then, and show you your own recent activity |
| Device id: a random number your browser or phone keeps, so Lizts recognises it next time (we store only a scrambled form of it). Not a hardware or advertising id | So known devices aren't asked for a code every time |
| 2-step sign-in: if you turn it on, the authenticator app's key (stored encrypted) and scrambled copies of your recovery codes. Passkeys: only a public key; your fingerprint or face never leaves your device and Lizts never sees it | To check the extra codes and passkeys you sign in with |
| When you use Lizts: a count of requests per hour (not what you looked at) | Quiet-time planning for the service, and, if you leave "Personalize Lizts for me" on, sorting suggestions and tips for you |
| Support chats and tickets: what you and our team write, photos or screenshots you share (shrunk, location data removed), the page you started on, your survey answers, which staff member helped, and staff notes about your requests and about how best to help you | To answer you, pass your question to the right person, and check and improve our support |
| Other security records: the email and internet address of wrong passwords (deleted after one day), and the web server's standard access logs | To stop password guessing and keep the service safe |
What Lizts never collects
- Your OfferUp passwords or logins. They stay in the browser on your own computer. The Lizts Auto-Lister posts from there.
- Your GPS location, contacts, hardware (MAC) addresses, or anything else from your phone beyond the photos you choose. Places in the security log come only from your internet address and are approximate.
- Fingerprints, face scans or other biometrics. Passkeys check those on your own device.
- Advertising IDs. Lizts has no ads, no analytics, no tracking pixels and loads nothing from other companies' servers.
- Payment card numbers. Nothing is sold during testing; when paid plans arrive, payments will go through a payment company and Lizts won't see your full card number.
How your data is used
Only to run Lizts for you: to store and show your items, post them through your Lizts Auto-Lister, run your stock checks, and keep your account secure. If "Personalize Lizts for me" is on (Settings ▸ Privacy), we may also use when you use Lizts and what you list to sort suggestions and tips for you inside Lizts; turn it off at any time. Lizts does not sell your data, share it for advertising, or use your items or photos to train AI.
Who at Lizts can see it
Only people who need to, to run the service and help you. Lizts staff have roles (for example support representative, supervisor, manager) and each role can do only what it needs: a support representative can look up your account to answer a question or sort out a problem, but can't change the site's settings or delete accounts. A support look is read-only (your profile, list of items, devices, posting jobs and recent sign-in activity) and every look is recorded with the staff member's name and the time, so access is accountable. Staff never see your password, your authenticator key, your passkeys or your OfferUp logins, because Lizts doesn't have them in readable form.
Who else handles it
Lizts runs on servers in the United States rented from InMotion Hosting, which stores the data on our behalf and isn't allowed to use it for anything else. Apart from the AI helpers described below (only when switched on), nobody else receives your data, unless the law requires it (for example a valid court order).
AI helpers: if we switch them on, Lizts uses an AI provider (Anthropic, maker of Claude, or OpenAI, maker of ChatGPT) for three things: (1) the chat's help bot sends the text of your chat (not your photos) to suggest an answer from our help articles; (2) our support staff get a short summary of your conversations and their notes; (3) when you press "Write it for me" on an item, that item's photos (up to 4) and details are sent to suggest a title, description and price. The provider processes this for us under its business terms, which don't allow using it to train their AI. The AI can't see or change your account, and questions about money, account access, disputes or your data always go to a person.
When you post, your Lizts Auto-Lister sends your listing to OfferUp from your own computer and account; what OfferUp does with it is covered by OfferUp's own privacy policy.
Cookies and storage on your device
Lizts uses two cookies: one keeps you signed in, the other holds this device's random id so we can recognise it next time you sign in. Both are only sent to lizts.com, can't be read by the page's scripts, and are never used for tracking or ads. Your device also remembers a few choices locally, such as the theme, the item view and your name for stock checks; they never leave your device.
How long it's kept
Your data is kept while you have an account. Wrong-password records are deleted after one day, the sign-in security log after about 13 months, new accounts whose email was never confirmed after 7 days, and closed support chats after 2 years (these are our normal settings; we may shorten them, and we'll update this page before making any of them longer). When you delete your account, your items, photos, history and devices are removed from Lizts right away; copies in the hosting company's backups disappear as those backups are replaced on their normal schedule.
Your choices and rights
- See and change your data in the app at any time.
- Download it: Settings ▸ Your data gives your items as a spreadsheet file, or everything as one file. You can also email us for a copy.
- Ask who looked: email us to find out when Lizts staff opened your account for support.
- Delete it: Settings ▸ Delete account removes your account and everything in it, for good.
- California residents have the right to know what personal information is collected, to delete it, to correct it, and not to be discriminated against for using these rights. Lizts does not sell or share personal information, so there's nothing to opt out of. You can use these rights in the app or by emailing us.
How it's protected
Everything travels over encrypted HTTPS. Passwords, sign-in tokens and codes are stored only as one-way hashes. Sign-in attempts are rate-limited, new devices and unusual places are asked for an extra code, and you're emailed when a new device signs in. You can add passkeys and an authenticator app in Security. Pages follow strict browser security rules and run no outside code. Photos are served only to their owner. No system is perfectly secure, but we follow recognised standards (OWASP) and fix problems quickly.
Children
Lizts is for adults selling their own things; you must be 18 or older to use it. We don't knowingly collect information from children. If you think a child has given us information, email us and we'll delete it.
Changes
If this policy changes, the new version is posted here with a new date. For important changes we'll also tell you in the app or by email before they take effect.
Contact
Questions or requests: support@lizts.com.
IP geolocation by DB-IP (CC BY 4.0).