Cookies on Quad
We need a sign-in cookie to run the site. We'd also like to use analytics and advertising cookies, which share usage data with Google and Meta. Your choice, and you can change it any time. Privacy Policy
Legal
What Quad collects, why, who else sees it, and how to get it deleted. The table below summarizes everything; the sections after it give the detail.
Effective date: September 26, 2026
Quad is operated by Jaden Daniels d/b/a Quad, a sole proprietorship. This policy explains how we collect, use, share, and protect your personal information. Contact us at [email protected].
This table is the short version of this whole policy. "Linked to you" means the data is associated with your account. "Used to track you" means it may be used to follow you across other companies' sites or apps for advertising or measurement.
| Data type | What that includes | Why we collect it | Linked to you | Used to track you |
|---|---|---|---|---|
| Identity | Name, university email address, Google account identifier, profile photo from Google, campus, and the signature image you draw when transferring ownership of an item | Creating your account, confirming you are enrolled at a campus we support, showing who a listing belongs to, and keeping a record that ownership was transferred | Yes | No |
| Contact & payout | Venmo handle | Sending you the payout when your item sells | Yes | No |
| User content | Item photos, titles and descriptions, profile bio, messages you send to other users | Operating the marketplace, listing your items, letting buyers and sellers talk | Yes | No |
| Agreement records | When you accepted our Terms and Privacy Policy and which version, when you acknowledged the ownership-transfer disclosure, and the IP address and browser user agent recorded at each of those moments | Showing that you agreed to the terms that apply to you, and to the sale of a specific item | Yes | No |
| Pickup details | Pickup location you type in, pickup notes, preferred date and time slot | Scheduling and completing the physical pickup of your item | Yes | No |
| Purchases | Order history, amounts paid, any sales tax charged, order status, and the Stripe payment identifier for each transaction | Completing sales, calculating payouts, remitting any sales tax collected, resolving disputes, keeping financial records | Yes | No |
| Usage | Listing view counts, which pages you visit, and how you got to the site | Showing sellers how their listings perform, understanding what students want, improving the product | Yes | Yes |
| Diagnostics | IP address, browser user agent, error reports | Rate limiting, preventing abuse and fraud, debugging problems | Yes | Yes |
What we do not collect: we never see or store your payment card number, CVV, or bank details — Stripe handles those directly. We do not collect your precise device location, contacts, photos beyond the ones you upload, health data, or biometric data. We do not ask for your Venmo password.
We use what we collect to:
Essential cookies. We set a session cookie when you sign in. It keeps you logged in and protects against cross-site request forgery. The platform does not work without it, so it cannot be turned off.
These do not load until you allow them. When you first visit, we ask. Analytics and advertising storage is switched off by default and stays off unless you choose "Accept all" — closing the banner without choosing is not consent. You can change your mind at any time using the Cookie settings link in the footer.
Analytics and advertising. We use Google Tag Manager to load measurement tags. The tags deployed in our container are Google Analytics 4 and the Meta (Facebook) Pixel. These set their own cookies and identifiers and collect the "Usage" and "Diagnostics" rows in the table above — including your IP address, browser and device information, and which pages you visit — and share it with Google and Meta. Meta may match that data to a Facebook or Instagram account and use it to show you ads for Quad. If we add a tag, we will update this list before it goes live. You can read Google's Privacy Policy and Meta's Privacy Policy.
You can limit this using your browser's cookie controls, a tracker-blocking extension, Google's Analytics opt-out add-on, or your Meta ad preferences. We honor Global Privacy Control signals as an opt-out of sharing under Section 8: if your browser sends a Sec-GPC signal we switch advertising and analytics storage off for that session before any tag loads, show you a confirmation that we did, and record the opt-out against your account if you are signed in.
We do not sell your personal information. We do share limited usage and diagnostic data with advertising partners for cross-context behavioral advertising, as described in Section 8, and you can opt out at any time.
We may also disclose information when required by law, to respond to a valid legal request, to investigate fraud or a violation of our Terms, to protect someone's safety, or in connection with a sale or reorganization of the business — for example, if this sole proprietorship later becomes a limited liability company.
What other users see: your name, profile photo, bio, campus, and your active listings are visible to other students. Your email address and Venmo handle are not shown to other users.
We keep your account information while your account is active. If you request deletion, we remove your personal data within 30 days, except where we must keep it — records of completed transactions, payouts, and signed ownership transfers are retained for at least seven years for tax, accounting, and dispute-resolution purposes. Messages are retained while either participant's account is active. Diagnostic logs are retained for up to 90 days.
You have the right to:
To exercise any of these, email [email protected]. We will respond within 30 days. We may need to verify your identity by confirming control of the email address on the account.
We do not sell personal information. However, under California law (the CCPA as amended by the CPRA) and similar state laws, using an advertising pixel counts as "sharing" personal information for cross-context behavioral advertising. The measurement tags described in Section 4 mean that is what we do with the Usage and Diagnostics data, if and when you allow those tags to load.
To opt out of that sharing, do any of the following:
Quad is for adults aged 18 and over, so we do not knowingly collect or share the personal information of any minor. Opting out does not affect your account or your ability to use Quad.
Where the GDPR or UK GDPR applies to you, our legal bases are: performing our contract with you (running your account, listing your items, processing payments and payouts); our legitimate interests (securing the platform, preventing fraud, understanding and improving the product); your consent (analytics and advertising cookies, which you can withdraw at any time); and compliance with legal obligations (tax and accounting records).
Our servers and service providers are in the United States. If you access Quad from outside the U.S., your information will be transferred to and processed there.
We protect your data with HTTPS encryption in transit, a strict content security policy, rate limiting on our API, server-side validation of everything users submit, and access-controlled cloud storage. Payment card data never touches our servers.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you within 45 days of confirming it, and will notify the Rhode Island Attorney General where required by R.I. Gen. Laws §11-49.3-4.
Quad is for adults aged 18 and over. Our Terms require it, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly and close the account.
We confirm enrollment by .edu email domain only — we do not independently verify age. If you believe someone under 18 has given us personal information, email [email protected] and we will remove it.
As a backstop under the Children's Online Privacy Protection Act, we never knowingly collect personal information from children under 13.
We may update this policy. When we do, we will change the effective date at the top of this page and notify you of material changes by email or by posting a notice on the platform. Adding a new category of tracking to the tag container described in Section 4 is a material change, and we will update this page when it happens.
Privacy questions or data requests: [email protected].