Privacy Policy

This Privacy Policy explains how SNA2 LLC, doing business as Cricket Sport Shop, operating Cricket Market (“we,” “us,” or “Company”), collects, uses, and protects information about you when you use our Platform at https://cricketmarketusa.com.

1. Information We Collect

1.1 Information You Provide

• Account registration: Name, email address, and role (buyer or seller).
• Listings: Item title, description, category, condition, price, and photos you upload.
• Messages: In-platform messages between buyers and sellers related to orders.
• Dispute filings: Reason text you submit when filing a dispute.
• Reviews: Star ratings and optional review text you leave after a completed order.

1.2 Information Collected Automatically

• Order data: Transaction amounts, order status history, timestamps, and Stripe payment identifiers (charge ID, transfer ID).
• Log data: Server request logs including IP address, browser type, and pages visited, retained for security and debugging.
• Product analytics: We use PostHog, a product analytics service, to understand how visitors and registered users use Cricket Market. Analytics events may include: the origin and path of pages visited; listing and order identifiers; item category, condition, and a broad price range (for example, “$100–$200”); search result count and whether a text search was used; registration and login completion; listing draft and publication steps; checkout and transaction milestones; shipping carrier and service; browser type and version; device type; and browser language. For logged-out visitors, events are associated with a temporary anonymous identifier held in browser memory. For logged-in users, events are associated with an internal numeric account ID; those events are pseudonymous. URL query strings and fragments are removed from page addresses before transmission. GeoIP enrichment is disabled; we do not receive city, country, or approximate location data from PostHog. We do not intentionally transmit to PostHog: names, email addresses, phone numbers, postal addresses, passwords, authentication tokens, payment card details, private messages, listing descriptions, raw search text, exact listing prices, exact payment amounts, or shipping tracking numbers.

1.3 Payment Information

We do not store your full card number, CVV, or bank account details. All payment card data is handled directly by Stripe, Inc., which is PCI-DSS compliant. We receive only tokenized references (payment intent IDs, charge IDs) from Stripe.

2. How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To process transactions, hold funds in escrow, and release payments to sellers.
• To display listings to other users and power search.
• To facilitate messaging between buyers and sellers within orders.
• To send transactional emails (order updates, dispute notifications, verification links).
• To detect fraud, enforce Platform policies, and comply with legal obligations.
• To improve the Platform through aggregate, anonymized analytics.

We do not sell your personal information to third parties. We do not use your data for targeted advertising on third-party platforms.

3. Information Sharing

3.1 Between Users

When you buy or sell, your name and order status are visible to the other party. Seller reviews are publicly visible on seller profiles. Your email address is never shared with other users.

3.2 Service Providers

We share data with the following third-party service providers:

• Stripe, Inc. — payment processing and seller payout. Stripe receives transaction amounts, buyer card data, and seller banking details for connected accounts.
• Railway Technologies, Inc. — cloud hosting and database infrastructure. All backend services and databases run on Railway’s platform.
• Vercel, Inc. — frontend hosting and content delivery.
• PostHog, Inc. — product analytics. Cricket Market is configured to use PostHog US Cloud. PostHog receives the analytics events described in Section 1.2. Session recording, automatic interaction capture, heatmaps, GeoIP enrichment, surveys, experiments, and advertising tracking are not enabled.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.

3.4 Business Transfer

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

4. Stripe & Payment Data

For sellers, connecting a Stripe account requires you to provide Stripe with personal and banking information directly on Stripe’s hosted onboarding pages. We never see or store that information; it is governed by Stripe’s Privacy Policy. We store only your Stripe connected account identifier to route payouts.

5. Cookies & Session Tokens

We use a minimal number of cookies and tokens:

• Refresh token cookie — an HTTP-only cookie used to refresh your login session without re-entering your password. It expires after 7 days.
• Access token — a short-lived JWT stored in memory (not in localStorage or a persistent cookie) used to authenticate API requests. It expires after 15 minutes.

We do not use advertising cookies or third-party tracking pixels. Our product analytics provider (PostHog) is configured without a persistent analytics cookie or localStorage entry; the anonymous session identifier is held in browser memory and resets when the page is fully reloaded or the tab is closed. Activity by logged-in users may be associated with the same internal account ID across sessions through the account login process, not through a persistent analytics cookie. Analytics are not used for cross-site advertising.

6. Data Retention

We retain your account information and order history for as long as your account is active and for a minimum of 5 years thereafter to comply with financial record-keeping obligations. You may request deletion of your account; however, we may retain transaction records required by law or for dispute resolution.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account (subject to legal retention requirements).
• Opt out of non-transactional communications. Note: we cannot opt you out of transactional emails (order updates, dispute notices) while your account is active.

To exercise these rights, email us at support@cricketmarketusa.com with the subject line “Privacy Request.” We will respond within 30 days.

Texas residents may have additional rights under the Texas Data Privacy and Security Act (TDPSA). Contact us at support@cricketmarketusa.com to submit a request under the TDPSA.

8. Security

We implement technical safeguards including HTTPS encryption in transit, HTTP-only and Secure-flagged session cookies, JWT-based authentication with short-lived access tokens, and database access restricted to private network infrastructure. No system is completely secure; we cannot guarantee absolute security of your data.

9. Changes to This Policy

We will post any material changes to this Privacy Policy on this page and update the “Last updated” date above. If changes are significant, we will notify registered users by email at least 14 days before they take effect.

10. Contact

For privacy questions or requests:
SNA2 LLC d/b/a Cricket Sport Shop
11003 Bluewater Lagoon Cir, Cypress, Texas 77433
support@cricketmarketusa.com