LEGAL

Privacy Policy

Effective September 5, 2026

Read the short version.

This Privacy Policy explains how Scott Smith dba SMISCO, doing business as If There's Anything That You Want (A SMISCO Company) (Operator, we, us, or our), collects, uses, discloses, retains, and protects personal information through iftheresanythingthatyouwant.com and its related accounts, marketplace pages, listings, subscriptions, communications, and features (collectively, the Service).

The Service is offered for use in the United States. It is intended for adults and is not directed to children.

1. Information we collect

Account information

When you register or maintain an account, we collect:

• first and last name;
• public display name;
• email address and verification status;
• phone number, which we do not represent as verified unless the Service expressly says so;
• password hash and account-security information;
• timezone and preferences;
• account status, roles, entitlements, and settings; and
• registration, sign-in, password-reset, and account-change records.

We use this information to create and secure the account, identify the Account Holder, provide requested features, communicate about the Service, prevent abuse, and enforce the Terms & Conditions.

Public Listings and marketplace information

We collect the Seller's public name, marketplace address, Listings, descriptions, prices, categories, attributes, photographs, status, and related timestamps and identifiers.

Seller marketplace pages and Listings are public by design. Visitors, search engines, and other third parties may view, index, cache, share, or copy them. Deactivation or deletion from our active Service does not remove copies outside our control.

Subscription and billing information

For paid listing capacity, we collect or receive:

• selected plan and listing entitlements;
• subscription, customer, invoice, and transaction identifiers;
• charge amount, currency, dates, status, and payment failure information;
• limited payment-method information returned by the processor, such as brand, expiration, or last digits, if provided;
• billing communications and cancellation records; and
• information needed for taxes, accounting, fraud prevention, disputes, and legal compliance.

Full payment-card numbers and card security codes are entered with and handled by the payment processor. We do not intentionally store them on our systems.

Contact, support, privacy, and report information

When you contact us or report a user, Listing, billing issue, privacy concern, infringement claim, or safety matter, we collect the name, email address, subject, message, related page or account identifiers, attachments or evidence you lawfully and voluntarily provide, delivery information, and our handling and response records.

We use this information to receive, authenticate, investigate, answer, document, and resolve the matter; protect users and the Service; enforce rules; process rights requests; preserve evidence; and comply with law.

Do not submit sensitive information that is not reasonably necessary for the request. Never download, copy, screenshot, attach, email, forward, or re-upload suspected child sexual abuse material. Follow the Child Safety Policy and provide only the identifiers and description requested there.

Live-conversation content

The live-conversation feature is designed to send message content through an encrypted WebRTC data connection between the participants' browsers. The application does not intentionally create or store a server-side transcript of the messages.

Communications infrastructure may transport encrypted connection data when technically necessary. Either participant may photograph, screenshot, copy, print, or otherwise preserve content shown in that participant's browser. Browser software, extensions, devices, networks, or malware outside our control may also retain or expose content.

If a participant voluntarily sends us a lawful screenshot, copy, quotation, or other conversation evidence in a report, we receive and handle that submitted copy as contact and report information. That does not create a transcript of the entire conversation. Suspected child sexual abuse material must not be copied or submitted through the ordinary report process.

Live-conversation metadata

We retain a limited record that a conversation occurred, which may include:

• participant account or session identifiers;
• the Seller and Buyer status;
• the Listing or inquiry involved;
• request, queue, connection, start, end, and status times;
• whether a connection succeeded;
• how the conversation ended;
• a short optional note a participant types when requesting a conversation or ending one, which we pass to the other participant. This is text you wrote, not message content from the conversation itself, and it is deleted with the request record about two hours after the conversation ends; and
• safety, abuse, capacity, and diagnostic events that do not contain message text.

We use this information for contact history, capacity and queue operation, account continuity, fraud and abuse response, diagnostics, enforcement, and legal compliance.

Marketplace and Listing history

This feature is not yet available. We describe it here so that it is disclosed before it launches rather than after. Until it launches, the Service records none of the information described in this section, and the related statements in Sections 2, 3, 5, 6, and 7 describe how the feature will work rather than how the Service works today.

A Seller's marketplace address is deliberately hard to guess, and the Service has no site-wide search, so a Buyer who loses the link has no way to find that Seller again. To make returning possible, the Service keeps a Buyer's own history of the marketplaces and Listings that Buyer has looked at.

For a signed-in Account Holder, we record and associate with the account:

• each Seller marketplace page visited, and when;
• each Listing viewed, and when; and
• the Listings the Account Holder previously requested a conversation about, drawn from the conversation metadata described above.

This history is recorded automatically, without a separate action, and is on by default. It is shown only to the Account Holder it belongs to. It is never shown to a Seller, to another Buyer, or to any other visitor, and it does not by itself grant any ability to contact a Seller — availability and the Seller's own communication preferences continue to control that. You can turn the recording off, remove an individual entry, or clear the history entirely, as described in Section 7.

For a visitor who is not signed in, this history is kept in that visitor's own browser and is not transmitted to us or stored on our servers. It stays on that device, is not associated with any account, and is removed when the visitor clears the browser's site data for the Service.

Unregistered Buyer information

An unregistered Buyer may provide contact information so the Seller can identify or follow up with that Buyer concerning the conversation. We disclose that information to the Seller for that purpose. While the information is temporarily stored by the Service, it is protected using encryption appropriate to the implemented feature.

We delete the Service's active copy when the conversation ends, subject to transaction logs that do not contain the contact details, short-lived protected backups, security records, legal holds, and copies independently retained by the Seller or Buyer. We do not authorize the Seller to use the information for unrelated marketing.

Device, network, cookie, and operational information

When a person visits or uses the Service, we and our infrastructure providers may automatically collect:

• IP address and approximate location derived from it;
• browser, operating system, device type, language, and timezone;
• requested pages, referring page, date and time, response status, and traffic data;
• session, CSRF, authentication, and security identifiers;
• error, performance, rate-limit, and abuse signals; and
• administrative access and change logs.

We use this information to deliver pages, maintain sessions, protect forms, authenticate users, secure and troubleshoot the Service, prevent abuse, keep records, and understand basic operation.

2. Cookies and similar technologies

The Service uses a first-party session cookie on public and authenticated pages. It supports session continuity, sign-in, security, and protection against cross-site request forgery. The browser normally removes the cookie at the end of the session, while related server-side records expire under our security and retention settings.

We do not use advertising cookies or use cookies to track your activity over time across unrelated websites for targeted advertising. We do not authorize third parties to conduct that kind of tracking through the Service.

Because the Service does not engage in covered cross-site tracking, browser Do Not Track signals do not cause a different response. If our tracking practices change, we will update this Policy and provide any required choice before the change applies.

The Service also uses ordinary browser storage on the visitor's own device. A signed-out visitor's marketplace and Listing history, described in Section 1, is held there rather than on our servers. Storage of this kind is readable only by the Service on that device, is not transmitted to us, and is removed when the visitor clears the browser's site data for the Service.

3. How we use personal information

We use personal information to:

• provide accounts, marketplace pages, Listings, subscriptions, and communications;
• display information a Seller chooses to publish;
• verify email, authenticate users, and protect accounts;
• route inquiries and maintain limited contact history;
• maintain a Buyer's own marketplace and Listing history so that a returning Buyer can find a Seller's marketplace again;
• administer listing capacity, subscription status, renewal, cancellation, and billing support;
• send transactional, security, account, and billing notices;
• answer support, privacy, legal, and safety requests;
• detect, investigate, prevent, and respond to fraud, abuse, security incidents, prohibited content, and legal violations;
• administer copyright notices, counter-notices, restoration decisions, and the repeat-infringer policy;
• investigate child-safety concerns, restrict access, preserve evidence, and make legally required or permitted reports;
• maintain, test, troubleshoot, and improve Service reliability and accessibility;
• establish, exercise, or defend legal claims and comply with legal obligations; and
• perform other uses disclosed at collection or separately authorized by you.

We do not use an Account Holder's phone number or an unregistered Buyer's contact details for unrelated advertising.

4. When we disclose information

We may disclose personal information in the following circumstances.

Public information

We disclose marketplace pages, Listings, public names, photographs, and other information clearly designated as public. Search engines and visitors may process that information independently.

Between participants

We disclose the information needed to connect a Buyer and Seller, identify the context of the conversation, and provide contact details the participant chose to share. Direct browser connections may expose network information, including an IP address, to the other participant.

Service providers

We disclose information as reasonably needed to providers that perform hosting, database, storage, backup, content delivery, security, email, support, error monitoring, subscription billing, and payment processing. They may use the information only to provide contracted services, protect their systems, comply with law, and perform other uses permitted by their agreements and applicable law.

Professional advisers and business administration

We may disclose information to lawyers, accountants, auditors, insurers, and similar advisers when reasonably necessary. If the Service or relevant assets are involved in a financing, reorganization, merger, sale, or transfer, information may be reviewed or transferred subject to appropriate confidentiality, notice, and legal requirements.

Safety, rights, and legal obligations

We may preserve or disclose information when we reasonably believe it is necessary to comply with law or valid legal process; protect a person from harm; investigate fraud, abuse, infringement, or security incidents; enforce agreements; or protect the rights, property, or safety of users, the Operator, or others.

For a child-safety matter, we may disclose a report, User Content, account and subscriber information, technical and location information, communications information, and associated records to the National Center for Missing & Exploited Children (NCMEC), law enforcement, or another legally authorized recipient. We may delay or withhold notice of that disclosure when notice could endanger a person, interfere with preservation or an investigation, or violate law.

For a copyright matter, we may provide a takedown notice, including the complaining party's contact information, to the affected user and may provide a counter-notice, including the user's contact information, to the original complaining party. See the Copyright and DMCA Policy.

We evaluate legal demands and may object, limit disclosure, or notify affected users when lawful and appropriate. Because we do not intentionally store live message transcripts, we ordinarily cannot disclose a transcript we do not possess. We can disclose retained metadata and content a participant later submitted to us when legally required.

5. Sale, targeted advertising, and profiling

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising based on activity across unrelated services.

We do not use personal information to make decisions producing legal or similarly significant effects through profiling. Ordinary security, fraud, content-enforcement, and capacity rules may use automated signals, with human review when appropriate and reasonably available.

We do not use marketplace or Listing history for advertising, recommendations, ranking, or building a profile of a person's interests. It exists only so that the Buyer it belongs to can return to a marketplace, it is shown only to that Buyer, and it is not disclosed to a Seller or to any other participant.

If these practices change, we will update this Policy and provide any notice, consent, or opt-out required before the change applies.

6. Retention

We retain personal information only for the period reasonably necessary for the purposes described here, subject to the following rules and exceptions:

• Account information: while the account exists and afterward for the period needed for security, disputes, accounting, legal compliance, backup expiry, and enforcement.
• Public Listings: while published or stored in the account; removed from public display when deleted or deactivated, subject to backups, enforcement records, and third-party copies.
• Subscription and billing records: for the period required by tax, accounting, payment, fraud, chargeback, and legal rules.
• Conversation metadata and contact history: a record that a conversation took place — the participants, the Listing, the times, and the outcome — is kept for 90 days. The working record of the request itself, including any short note a participant typed when requesting or ending the conversation, is deleted about two hours after the conversation ends. Connection-signaling data is deleted after about ten minutes and connection diagnostics after 24 hours. A longer period applies where reasonably needed for a reported matter, security, fraud, a dispute, or a legal hold.
• Unregistered Buyer contact details: deleted from active systems when the conversation ends, subject to short-lived protected backups and legal holds.
• Marketplace and Listing history: kept until the Account Holder removes the entry, clears the history, turns the recording off, or closes the account. We do not age it out on a fixed clock, because a bookmark that disappears on its own defeats the purpose of keeping one. History held in a signed-out visitor's browser stays on that device until the visitor clears site data; we hold no copy of it.
• Contact, support, privacy, legal, and safety records: kept while the matter is open, and afterward as the record of it and of any repeat violation, so we do not delete on a fixed clock. Photographs quarantined with a report are deleted 30 days after the report is resolved.
• Copyright records: a copyright complaint and our handling of it are kept as contact and support records, above. We do not yet operate a formal notice-and-counter-notice procedure; when we do, its own retention rule will be published with it on the Copyright page.
• Child-safety preservation: when a provider report is submitted under 18 U.S.C. § 2258A, the report contents and reasonably accessible visual depictions, data, and digital files that may provide context or additional information are preserved for one year after submission. They may be preserved longer when permitted or required for child-protection purposes, legal process, an investigation, or another legal hold.
• Operational and security logs: rotated by size rather than on a fixed schedule. The most recent entries are retained — several megabytes per log, across a small number of files — and older entries are discarded automatically as newer ones arrive. Material security or enforcement events may be retained longer.
• Backups: database backups are retained until they are deliberately removed. We do not currently operate an automatic backup-expiry schedule, so information already deleted from the live Service may persist in a backup for longer than the periods above.

When retention ends, we delete, deidentify, or aggregate the information using methods appropriate to the system and sensitivity. We do not control copies lawfully retained by another participant, search engine, visitor, or independent third party.

7. Your choices and requests

Depending on the information and applicable law, you may:

• review and update account details;
• change the public name displayed by the Service;
• create, edit, deactivate, or delete Listings;
• turn marketplace and Listing history recording off, and remove an individual entry or clear the history entirely;
• cancel a paid subscription through the online cancellation control;
• close the account;
• ask for access to or correction of personal information;
• ask for deletion, subject to lawful exceptions; and
• appeal a denial when applicable law provides that right.

Submit a request through the Contact page or privacy@iftheresanythingthatyouwant.com. We will verify identity before granting access to, changing, or deleting protected information. An authorized agent must provide evidence of authority. We may deny or limit a request when permitted or required for security, fraud prevention, accounting, legal compliance, child safety, evidence preservation, dispute handling, freedom of expression, or another person's rights.

We will not discriminate against a person for exercising an applicable privacy right. We will respond within the period required by the law that applies to the request.

8. Security

We use administrative, technical, and physical safeguards designed for the nature of the information we hold. These include access controls, password hashing, transport encryption, session protections, logging, updates, backups, and vendor controls as appropriate to the system.

Material preserved under the federal CyberTipline-reporting law is maintained in a secure location, with access limited to personnel who need it for legally permitted handling. The preservation method is designed to remain consistent with the current NIST Cybersecurity Framework as required by applicable law.

No service, device, network, storage system, or transmission method can be guaranteed completely secure. Users must protect credentials, devices, saved transcripts, and information shared directly with another participant and must report suspected account compromise promptly.

If a security incident occurs, we will investigate, contain, remediate, preserve appropriate records, and provide notices required by applicable law.

9. Children and age information

The Service is not directed to children. A person must be at least 18 to create an account, publish a Listing, or participate in a live conversation.

We do not knowingly collect personal information online from a child under 13. If we learn that we have done so, we will take appropriate steps to delete it or obtain legally sufficient parental authorization where the law permits and we choose to support that use. A parent, guardian, or other person may report exploitation or another safety concern through the Child Safety Policy. Other age or privacy concerns may be reported through the Contact page.

10. State privacy laws

Some state privacy laws apply only when a business crosses specified revenue, data-volume, sale, or sharing thresholds. When a law applies to us and grants additional rights, we will honor those rights and publish any additional notice required.

This Policy does not claim that a threshold-based law applies when it does not, and it does not limit a right that applies regardless of our size.

11. Changes to this Policy

We may update this Policy prospectively to reflect legal, operational, or technical changes. The effective date identifies the current version. We will provide clear notice through the Service, by email, or both before a material change takes effect and obtain consent when legally required.

A change will not retroactively authorize a materially different use of information already collected when applicable law requires additional notice or consent. We will preserve prior versions for compliance records.

12. Contact

The data controller and Service operator is:

Scott Smith dba SMISCO
Doing business as If There's Anything That You Want (A SMISCO Company)
393 Hugh Allison Rd, Pikeville, TN 37367
privacy@iftheresanythingthatyouwant.com

Privacy requests and questions may also be submitted through the complete Contact page. Child-safety reports must follow the Child Safety Policy, and copyright notices and counter-notices must follow the Copyright and DMCA Policy.