Privacy Policy

Last updated: 2026-07-07

GoodToSell ("we", "us") is operated by Super Serious LLC (Lincoln, Nebraska, USA). This policy explains what we collect and why. We keep it minimal on purpose.

What we collect

• No accounts. You can use the checker and search without signing up. We don't collect names, emails, or payment details (there is no paid signup yet).
• Abuse prevention (hashed). To rate-limit the free checker we store a one-way SHA-256 hash of your IP address (and a session cookie value if present) together with a per-day request count. We do not store raw IP addresses, and the hash can't be reversed back to your IP.
• Links you check. When you check a marketplace URL, we fetch that listing's public metadata (title, designer, license, description, tags, thumbnail) via the marketplace's official API and cache it to show your result and to power a public results page. We never download or store the 3D model files.
• Automated classification (third party). To assess sellability and trademark risk, a listing's public text (title, description, license, tags) is sent to Anthropic's API for classification. This is public marketplace metadata, not your personal data. We cache the result so we don't re-send it.

Cookies & tracking

We use no analytics and no tracking — no third-party analytics, no measurement scripts, no advertising or social trackers, and nothing that follows you across sites. In normal use your browser only talks to goodtosell.app.

We set only strictly-necessary functional cookies: a small anti-CSRF cookie that secures form submissions, and — if you sign in — a session cookie that keeps you logged in. Both are functional, not tracking, carry no advertising, and the session cookie is cleared when you log out. Our CDN (Cloudflare) may also set a functional security cookie (e.g. bot protection) that we don't read.

Who we share with

We don't sell your data. Data is processed by the infrastructure and APIs that make the site work: Anthropic (classification), the source marketplaces (Thingiverse, Cults3D), our host (Railway, USA), and our CDN (Cloudflare). Each has its own privacy terms.

Retention

Hashed rate-limit records are short-lived (per-day counters). Cached listing metadata persists so results and public pages stay fast, and can be removed on request.

Your choices & contact

To ask what we hold about you or to request removal of a cached listing, email [email protected].

This is a privacy policy, not legal advice about your own selling. See our Terms.