Privacy Policy

Last updated: January 28, 2026

CO-OP is operated by Lasser Design LLC (“we”, “us”, “our”). This policy explains what data we collect, how we use it, and who else has access to it.

The short version: we collect only what we need to run the service, we don’t sell your data, and we use a small number of trusted third-party services to keep things running.

What we collect

When you use CO-OP, we collect and store the following:

  • Account information: Your username, email address, and password (stored as a secure hash — we never store your actual password).
  • Profile information: Your name and avatar, if you choose to provide them.
  • Catalog items: Names, descriptions, photos, and locations of items you add to your catalog.
  • Activity data: Records of loans, borrowing requests, calls for items, and messages you send through the platform.
  • Friend connections: Your relationships with other users, including invitations you send and accept.

How we use your data

We use your data to operate CO-OP — to let you list items, find things your friends have, coordinate borrowing, and communicate with other users. That’s it. We don’t use your data for advertising, profiling, or any purpose unrelated to running the service.

Where your data is stored

All CO-OP data — including the database, uploaded files, and application server — is hosted on a single virtual private server provided by Linode (part of Akamai Technologies). The server is located in the United States. Linode’s privacy policy is available at linode.com/legal-privacy.

Third-party services

We use a small number of third-party services to operate CO-OP:

Mailgun

We use Mailgun to send transactional emails, like account verification, password resets, and notifications about loan activity. When we send you an email, Mailgun processes your email address and the contents of that message. Mailgun’s privacy policy is available at mailgun.com/legal/privacy-policy.

Sentry

We use Sentry for error monitoring. When something goes wrong in the application, Sentry collects technical information about the error, which may include your browser type, the page you were on, and an anonymized identifier. We use this to find and fix bugs. Sentry’s privacy policy is available at sentry.io/privacy.

Google Fonts

Our website loads typefaces from Google Fonts. When you visit CO-OP, your browser connects to Google’s servers to download these fonts, which means Google receives your IP address. Google’s privacy policy is available at policies.google.com/privacy.

What we don’t do

  • We don’t sell your personal data to anyone.
  • We don’t show you ads or share your data with advertisers.
  • We don’t track you across other websites.
  • We don’t use your data to build profiles for purposes outside of CO-OP.

Data retention

We keep your data for as long as your account exists. If you delete your account, we will delete your personal data. Some information, like records of past loans, may be retained in anonymized form.

Your rights

You can request a copy of your data, ask us to correct inaccuracies, or ask us to delete your account and associated data. To make any of these requests, email us at allan@lasser.design.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we’ll make reasonable efforts to notify you. Your continued use of CO-OP after changes are posted means you accept the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, you can reach us at allan@lasser.design.