Your data

• From your sign-in: your name, email address and profile picture.
• What you add: a rough area (not your address), your join note, listings and their photos, private pickup details, loan requests, chat messages and any reports you file.
• A record of what happened to each loan, and an audit log of admin and account actions. The audit log holds ids and actions, not names, emails or message text.

• Anyone: tool names and categories, and how many are out. Nothing about who owns them.
• Members: your first name and last initial, your rough area, your listings and your lending record.
• The lender you borrow from, and the borrower you lend to: your pickup details once a loan is approved, and your chat on that loan.
• Admins: your full name, a masked email (like a••••z@example.com) and every loan's status. Not your chats — nobody but the two of you can read those.

Emails say what changed — “Priya approved your request for the drill” — and link back here. They never include chat messages, notes, pickup details or anyone's address. You can turn each kind off in Settings; overdue reminders always go out.

Photos are shrunk in your browser before they're uploaded, which also strips hidden location data (EXIF/GPS) from the file.

• Chat on a loan: deleted six months after the loan ends.
• Delivery logs and security events: 30 days.
• Photos that were uploaded but never attached to a listing: deleted within about a week.
• Your account: until you delete it.

• Download everything about you as a file, from Settings.
• Delete your account from Settings. Your listings come down, open requests are cancelled, your messages are erased and your sign-in is removed. Past loans stay in other people's history as “Former neighbour”.

The library is run by volunteer admins from the neighbourhood. Sign-in is handled by Clerk, data is stored with Convex, and emails are sent through the library's own mail provider.