Privacy Policy
Last updated October 23, 2026. Plain language, no fine print.
The short version
- We collect only what we need to run our sales, our email list and your account.
- We never sell or rent your personal information.
- You can download your data or delete your account yourself, any time.
What we collect
Email list and forms
When you join our email list or send us a message, we collect what you give us: your name, email, and optionally your ZIP/city and phone number, plus the date you signed up.
If you tap Get Early Access in one of our sale emails, we record that you opted in to that sale and when. That puts you on our separate Early Access list for that sale, and we set a small cookie on this website so the sale page can show you the full address and early-access times. The cookie only works for that one sale and expires a few days after the sale ends.
Member accounts
If you create an account, we store only:
- your first name, and your last name if you give it;
- your email address and whether you've confirmed it;
- your password, stored only as a one-way scrambled "hash" (bcrypt). We can't see or recover your password;
- that you confirmed you're 18 or older and accepted our Terms of Use, with the date (not your birthday);
- when the account was created and when you last logged in;
- your email preferences and the sales you've saved;
- if you turn on two-step verification, an encrypted key for your authenticator app and scrambled recovery codes.
We do not collect payment cards, Social Security numbers, birth dates, ID documents, or your precise location through accounts. Online auction bidding and payments, when they start, will run on a separate auction platform with its own privacy policy.
Cookies
Logging in sets a secure cookie that keeps you logged in for up to 14 days, and a small cookie that tells our pages to show "My account" instead of "Log in". We don't use advertising or tracking cookies.
Security logs
To stop password-guessing, we briefly keep counters of failed attempts tied to a scrambled form of your email or internet (IP) address. They're cleared automatically once they expire, usually within a day or two.
How we use it
- To run your account: log you in, keep your saved sales, and send account emails such as email confirmation and password resets. Those emails are needed for the account and aren't marketing.
- To send our sale announcements and early-access invitations, but only if you chose them. Every marketing email has a one-click unsubscribe link.
- To answer your questions, and to keep the site and your account secure.
How long we keep it
- Account information: until you delete your account, or until we close the account (we'd email you first).
- Email list records: until you unsubscribe or ask us to delete them.
- Pending account emails that couldn't be sent are deleted after 48 hours. Failed-login counters are cleared daily once they expire.
- Deleted accounts are removed right away from our live database. Copies can stay in our hosting provider's routine backups for a short time before they're overwritten.
Your choices: access, change, delete
- See or download your data: on your account page, choose Download my data.
- Change it: edit your name, email, password and email preferences on your account page.
- Delete it: on your account page, choose Delete my account. This permanently deletes your account and, unless you choose to stay subscribed, removes you from all our email lists.
- Unsubscribe: use the link in any email. Unsubscribing removes you from all of our marketing emails, both the mailing list and any early-access lists.
- Or just email 180estatesales@gmail.com and we'll do it for you.
We don't sell your information
We have never sold personal information and we don't plan to. We don't share it with anyone for their own marketing.
Nevada residents: your right to opt out of sale
Under Nevada law (NRS 603A.300 to 603A.360), you can tell us not to sell the personal information we collect about you through this website. We don't sell it, but you can still send a request, and we'll record it and honor it. Email 180estatesales@gmail.com with the subject "Nevada opt-out of sale". We'll confirm and respond within 60 days.
Who stores it for us
Our website, accounts and lists are hosted by Netlify, which stores this information on our behalf in the United States. Our emails are delivered by an email-sending service (Resend) that processes your email address only to deliver our messages. Copies of form submissions are also kept in Netlify Forms. These providers may only use the data to provide their service to us. We may also share information if the law requires it.
How we protect it
- The whole site uses encrypted HTTPS connections.
- Passwords are stored only as strong one-way hashes, and we check new passwords against lists of known leaked passwords (without sending your password anywhere).
- Login cookies are signed and can't be read by page scripts. We limit repeated login attempts, use single-use expiring links for email confirmation and password resets, and offer two-step verification.
- Only the owner of 180 Estate Sales can see account and list information, through a protected admin area.
No system is perfectly secure. If a breach ever affects your personal information, we'll notify you, and anyone else the law requires, as quickly as reasonably possible as required by Nevada law (NRS 603A.220).
Children
Accounts are only for people 18 or older, and this site isn't directed to children under 13. If you think a child has given us information, email us and we'll delete it.
Changes
If we change this policy, we'll post the new version here with a new date. If a change is important, we'll tell account holders by email.
Contact
180 Estate Sales, Carson City, NV. Email 180estatesales@gmail.com or call (775) 683-1965.