Effective Date: August 4, 2026
The type of data that we collect and process includes:
Further data may be collected if you choose to share it, such as if you fill out fields on your profile.
We collect some or all of this information in the following cases:
We may use your personal information in the following ways:
Where available, Legacy may offer optional sign-in methods provided by Google or Apple, as well as passkeys. These methods are used only to create, identify, connect, secure, and authenticate your Legacy account.
If you choose Google Sign-In or connect your Google account to an existing Legacy account, Google may provide Legacy with a stable Google account identifier, your email address, whether Google has verified that email address, and your name or other basic profile information made available through the openid , email , and profile permissions.
Legacy uses the stable Google account identifier, rather than the email address alone, to recognize a connected Google account.
Legacy uses this information only to create or connect your Legacy account, authenticate you, prevent unauthorized account access, provide account support, maintain security records, and deliver the services you request.
Legacy does not receive your Google password and does not access your Gmail, Google Drive, Google Contacts, Google Calendar, or other Google services.
Google access tokens, refresh tokens, and ID tokens are not retained by Legacy after the authentication process is completed.
Legacy does not sell Google user data or use it for advertising, targeted advertising, creditworthiness decisions, lending purposes, data brokerage, or training artificial intelligence models.
Legacy does not disclose Google user data except to service providers acting on our behalf as necessary to operate and secure the service, when required by law, or at your direction.
Legacy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.
If you choose Sign in with Apple or connect your Apple account to an existing Legacy account, Apple may provide Legacy with a stable, developer-specific Apple account identifier, your verified email address, an Apple private relay email address if you choose Hide My Email, an indicator showing whether the address is a private relay address, and your name if you choose to provide it.
An Apple private relay address allows Legacy to communicate with you without receiving your personal Apple Account email address.
Legacy uses Apple information only to create or connect your Legacy account, authenticate you, prevent unauthorized account access, provide account support, maintain security records, and deliver the services you request.
Legacy does not receive your Apple Account password and does not access iCloud, your photos, contacts, messages, files, or other Apple services.
If you create a passkey, Legacy stores the credential identifier, public key, a random user handle, and limited technical and security information needed to recognize, verify, display, and manage the passkey. This information may include the passkey label, creation date, last-used date, authenticator type, and synchronization or backup status.
The passkey private key remains on your device, security hardware, or passkey provider and is not provided to Legacy.
Face ID, Touch ID, fingerprint information, facial information, Windows Hello information, device PINs, passcodes, and other biometric or device-unlock information are verified locally by your device or passkey provider. Legacy does not receive or store that biometric or device-unlock information.
You may manage connected Google or Apple accounts and registered passkeys through the Login & Security section of your Legacy account.
Disconnecting Google or Apple, or removing a passkey, prevents that method from being used for future Legacy sign-ins. It does not delete your Legacy account, transaction history, bids, purchases, invoices, or other records associated with your account.
Authentication identifiers and passkey records are retained while they remain connected or active and for as long as reasonably necessary to operate and secure your account. When a method is disconnected or removed, Legacy may retain limited revoked-credential and security-audit records for fraud prevention, account security, dispute resolution, legal compliance, and enforcement of our agreements.
Google, Apple, your device operating system, and your chosen passkey provider may separately process information under their own privacy policies and account settings.
In addition to notifying you of activity on our site which may be relevant to you, from time to time we may wish to communicate with all members any important information such as newsletters or announcements by email. You can opt-in to or opt-out of such emails in your profile.
We may collect non-personally identifiable information about you in the course of your interaction with our site. This information may include technical information about the browser or type of device you're using. This information will be used purely for the purposes of analytics and tracking the number of visitors to our site.
We are committed to ensuring that any information you provide to us is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable measures and procedures to safeguard and secure the information that we collect.
Cookies are small text files which are set by us on your computer which allow us to provide certain functionality on our site, such as being able to log in, or remembering certain preferences.
You have a right to access the personal data we hold about you or obtain a copy of it. To do so please contact us. If you believe that the information we hold for you is incomplete or inaccurate, you may contact us to ask us to complete or correct that information.
You also have the right to request the erasure of your personal data. Please contact us if you would like us to remove your personal data.
Continued use of our site signifies your acceptance of this policy. If you do not accept the policy then please do not use this site. When registering we will further request your explicit acceptance of the privacy policy.
We may make changes to this policy at any time. You may be asked to review and re-accept the information in this policy if it changes in the future.
