Privacy policy

Last updated 16 September 2026

The short version: we store your email address, what you have unlocked, and what you have saved. There is no advertising, no analytics and no tracking of any kind on this site, and nothing about you is sold or shared for marketing.

Who holds it

KickbackPro, trading as JunkYardPicker, is responsible for the data described here. Reach us at hello@junkyardpicker.com.

What we store

Your email address. It is how you sign in and how we reach you, and it is the only thing we ask for. We do not ask for your name, your address or your phone number, and there is nowhere to give them.

Your account activity: which vehicles you have unlocked, your pull list, the price alerts you have set, and whether you are in saving or reselling mode. This is what makes the account useful to you rather than an empty shell.

Your billing state: whether a subscription or day pass is active, when it ends, and the identifiers Stripe gives us for your customer record, your subscription and your payment. We do not store card numbers, expiry dates or security codes - those go from your browser to Stripe and never reach our server.

Ordinary server logs, which include IP addresses, kept briefly for security and debugging.

What we do not do

No analytics, no advertising, no third-party tracking scripts, no social pixels, no fingerprinting, no profiling, and no selling or sharing of your data with anyone for their own purposes. This is a statement about the code, and it is checkable: the site loads no third-party script at all beyond the fonts it renders in.

Cookies

One cookie, and it is the one that keeps you signed in. It is strictly necessary for the site to work, which is why there is no consent banner asking you about it - there is nothing optional to consent to.

Your device also stores the sheets you have opened, your pull list and your display preferences locally, so they work offline. That stays on your device. Clearing your browser data clears it.

Who else sees it

Stripe processes payments and receives what it needs to do that, including your email address. It is the controller for that payment data and has its own privacy policy.

Resend sends our email - sign-in links and the alert digests you asked for - and therefore handles your address and the content of those messages.

Railway hosts the application and its database, and Cloudflare provides DNS and forwards mail sent to our address.

We query eBay for public listing prices. Those requests carry nothing about you: eBay is never told who asked, and never receives your email address or anything else identifying you.

Beyond that, we disclose data only where the law requires it.

Why we are allowed to

We store your email and account activity because we cannot provide an account without them - performance of the contract you entered by signing up. Billing records are kept because tax and accounting law requires it. Logs and rate limits exist for security, which is our legitimate interest in not being taken down.

Alert emails are sent because you explicitly set an alert. We send no marketing email, so there is none to opt out of.

How long

Account data is kept while the account exists, and is deleted when you delete it.

A sign-in link expires fifteen minutes after it is issued and is cleared out shortly after. A sign-in session lasts ninety days from the last time you used it, and no more than a year in total, after which you sign in again.

Billing records are kept for as long as tax law requires, which is longer than the account and applies even after deletion.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Deleting the account removes your email address, your unlocks, your pull lists and your alerts. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your data protection authority.

Write to hello@junkyardpicker.com and we will deal with it within a month. We will not charge you for it and will not ask why.

Children

This is not a service for children and we do not knowingly hold data about anybody under sixteen. If you believe we have, write to us and we will remove it.

Changes

If this policy changes materially we will email account holders before it takes effect. The date at the top is when it last changed.