Last updated: August 14, 2026
1. Who we are
Snifffr is operated by a group of companies trading as Gif Digital:
- Gif Digital Pty Ltd (Australia, ABN 37 639 815 357) operates the Snifffr platform
- Gif Digital Inc (United States, Delaware)
- Gif Digital UK Ltd (United Kingdom, Company No. 16742863)
Gif Digital Pty Ltd is the controller of your personal information for the purposes of the Australian Privacy Act 1988, the UK GDPR and the EU GDPR, except where stated otherwise. Platform operations, moderation, support and engineering are carried out from Australia.
Privacy enquiries: [email protected]
2. What Snifffr is, and what that means for your data
Snifffr is an adult peer-to-peer marketplace. Members buy and sell used personal items and adult content. The platform is restricted to persons aged 18 or over.
Because of the nature of the service, information about your use of Snifffr may reveal or imply details about your sex life or sexual preferences. Privacy laws in the UK, EU, US and Australia treat this as sensitive information requiring your consent.
We treat the following as sensitive:
- The fact that you hold a Snifffr account
- Private content and instant media you list, and content you purchase
- Your purchases and token spending
- Your messages and search history
We rely on your consent to process this information, given when you create an account. You may withdraw that consent at any time by closing your account. Withdrawal does not affect processing already carried out.
Your listings, public galleries and reviews are also sensitive in nature, but you choose to publish them. We rely on your decision to make them public rather than on your consent.
3. Information we collect
Information you give us
- Account: username, email address, password, date of birth, country
- Profile: display name, biography, photographs, preferences, profile and cover images
- Seller details: a payout email address, Wise handle or your name
- Listings and content: item descriptions, photographs, videos, galleries, posts, private content, instant media, interview
- Transactions: orders, shipping addresses, order notes
- Communications: private messages, live chat, support tickets, reviews and ratings
- Verification: the outcome of your age verification check, and the photograph you submit for Snifffr verification (see section 6). Identity documents for age verification are provided to AgeGo, not to us.
- Documents you send to support. You may sometimes send us documents to resolve an issue — for example evidence relating to a user dispute or a chargeback. Where you do, those documents are stored with your support ticket.
- Competitions and promotions: entries, referral codes and any information you provide when taking part
If you contact us without holding an account, we collect the information you provide in order to respond.
If you provide us with personal information about another person, you are responsible for informing them of this policy and ensuring you are entitled to provide it.
If you do not provide us with personal information that we request, we may not be able to provide you with the Snifffr Services.
Information generated by your use of the platform
- Purchase and sales history, including counterparties and the content purchased
- Badge and achievement status, tier progression, review scores and interview
- Token balances, purchases and cash-outs
- Comments and likes on photos, and comments on the activity feed
- Messaging activity, including volume and number of distinct members contacted
- Followers, follows, favourites and saved searches
- Fraud and risk scores derived from your activity
Information collected automatically
- IP address and derived approximate location
- Referring URLs, pages viewed, session timestamps
- Cookies and similar technologies
- Signals collected by Google reCAPTCHA on our signup and login forms, used to distinguish human users from automated ones
Information from third parties
- Payment and chargeback data from our payment providers
- Chargeback alerts from Payshield
- Age verification outcomes from AgeGo
- Referral attribution data, where you arrived via a member's referral link
Payment data
Snifffr does not process payments. All payments are handled by third-party payment providers: CCBill, Unicorn Group and SegPay. When you pay, you provide your card or account details directly to that provider, not to us.
What we can see. We have access to a merchant dashboard provided by each payment provider, which we use for dispute resolution, refunds, fraud investigation and accounting. Through it, authorised staff can view:
- Your billing name
- Your billing email address
- Your billing address
- Your IP address and country
- Your transaction history, including amounts, dates and chargebacks
If you contact us about a payment problem, we only need the first six and last four digits of the card, along with the amount and approximate date of the charge. Please do not send us your full card number.
Please note that your billing name may be your legal name, even where you use a pseudonym on your public profile. Access to the payment dashboard is restricted to staff who need it for the purposes above.
Each provider handles your payment information under its own privacy policy:
- CCBill — ccbill.com
- Unicorn Group — unicorngroup.ch
- SegPay — segpay.com
Seller payouts. We pay sellers using Wise. For this we hold the seller's name and their email address or Wise handle. We do not collect or store bank account numbers, sort codes, BSB numbers, IBANs or any other banking details. We keep a record of payout amounts and dates for accounting and tax purposes.
4. Why we use your information, and our legal basis
| Purpose | Information used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Create and operate your account | Account, profile | Contract |
| Display listings, content and profiles | Listings, content, profile, badges | Contract; information you have made public |
| Process orders and payments | Transaction, address, payment | Contract |
| Enable member-to-member messaging | Messages | Contract |
| Detect and prevent fraud and scams | Messages, activity, payment | Legitimate interests; substantial public interest |
| Moderate content and enforce our terms | Listings, content, messages, activity | Legitimate interests; legal obligation |
| Verify age | Age verification outcome | Legal obligation |
| Award and display badges | Purchase history, reviews, account age | Contract; legitimate interests |
| Service emails (receipts, security, disputes) | Account, transaction | Contract |
| Marketing emails | Account, activity | Consent |
| Analytics and platform improvement | Usage, device | Legitimate interests |
| Comply with legal and tax obligations | Transaction, identity | Legal obligation |
Under the Australian Privacy Act, we collect and use sensitive information only with your consent and where it is reasonably necessary for our functions and activities.
5. Automated screening and fraud detection
We screen messages and score accounts for signs of fraud, and we screen uploaded images against our content policy.
Message screening
Private messages sent between members are automatically screened before delivery.
- Message text is transmitted to Anthropic PBC (United States), our artificial intelligence provider, which analyses it against known fraud patterns and returns a risk score
- Anthropic processes this text on our behalf as a data processor, under a data processing agreement
- Message content is not used to train Anthropic's models
- We retain the resulting score and the matched pattern
Possible outcomes:
| Risk level | What happens |
|---|---|
| Low | Message is delivered normally |
| Medium | Message is delivered with a warning notice shown to the recipient |
| High | Message is held and not delivered; the account is queued for human review |
Image screening
Images uploaded to Snifffr are automatically screened by Sight Engine to detect content that breaches our content policy. Images flagged by this process are reviewed by our moderation team.
Account-level risk scoring
We also score accounts using the number of distinct members contacted, the ratio of messages to completed purchases, account age, verification status, badge history and chargeback history.
High-scoring accounts may have new conversations restricted, or the account suspended or terminated pending review.
Your rights in relation to automated decisions
Where automated processing results in a decision that significantly affects you — a held message, a restriction, or a suspension:
- A human reviews it. No account is permanently suspended on an automated basis alone.
- You may request an explanation of the decision.
- You may contest the decision and ask for it to be reconsidered by a person.
We do not make risk decisions based on your nationality, ethnicity or country of residence.
6. Age and identity verification
We are required to verify that our users are adults. In Australia this arises under the age assurance codes made under the Online Safety Act 2021; in the United Kingdom, under the Online Safety Act 2023.
We use AgeGo (agego.com) to carry out age verification. AgeGo is independently certified under the Age Check Certification Scheme (ACCS).
Snifffr does not see your identity documents. When you verify, you are redirected to AgeGo, where you choose a verification method. AgeGo carries out the check — using its own verification providers — and returns to us only a confirmation that you meet the age requirement.
- We receive: whether you passed, the date, and the method category used
- We never receive: your identity document, your photograph or selfie, your date of birth as shown on your ID, or any card details used for verification
AgeGo uses third-party providers to perform the underlying checks, and handles your information under its own privacy policy: agego.com
Reuse across other sites. AgeGo operates a shared verification model — once verified, you may be able to access other sites that use AgeGo without verifying again. Your verified status is therefore held by AgeGo and is not specific to Snifffr. This is managed by AgeGo under its own terms.
Snifffr verification
Snifffr verification is separate from age verification and is carried out by our own moderators. To become Snifffr Verified you submit a photograph of yourself holding a handwritten note showing "SNIFFFR" and that day's date. Our review team assesses it, usually within 24 hours.
Your verification photograph is stored on our own systems. It is seen only by our review team, is never displayed anywhere on Snifffr, and is not shared with other members or with any third party.
We keep it while your account is open, so that we can investigate any later fraud, impersonation or dispute involving your account. It is deleted when you close your account.
Age assurance data is used only for age assurance. It is not used for marketing, profiling or advertising.
7. Badges, reviews and what other members can see
What is visible
Some information is visible to other members. This is central to how trust works on the platform.
| Visible to | Information |
|---|---|
| Everyone | Username, profile image, background image, biography, country, age, status, status updates, interview, what you offer for sale, what you are looking for, shop listings, galleries, review score, badges, verification status, account age, followers and following, last active time, recent activity, posts |
| Members you transact or message with | Messages, relevant transaction details |
| Sellers you buy from | Your shipping name and address |
| Nobody but you and our staff | Payment details, snifffr verification image, support tickets, billing name and billing address, orders, full account data, messages between users |
Badges
We award badges based on your activity: verification status, completed orders, number of distinct counterparties, reviews received, and account age.
Badges may be revoked where the underlying basis no longer holds — for example following a chargeback, a successful dispute, or a breach of our terms.
Badges were awarded retroactively against historical order data.
Featured sellers. Sellers can pay to have their profile promoted at the top of seller listings and home page. Featured placement is paid promotion, not a ranking based on quality or reviews.
Reviews
Reviews you write are visible to other members and attributed to your username. Reviews you receive form part of your public reputation. We do not delete reviews on request except where they breach our content and review policy.
Privacy controls
You control who can see your profile and who can contact you:
- Profile visibility — set your profile to be visible to everyone, to your followers only, or hidden from everyone
- Blocking individual members — prevent a specific member from viewing your profile
- Live chat — prevent specific members from contacting you on live chat
- Shareable profile — when on, you and anyone viewing your profile can copy a public share link to promote you on other platforms. Turn it off to remove the share button and disable your public share page.
These controls apply to buyers and sellers alike, and can be changed at any time in your account settings.
Some information remains visible while your account is active, because other members rely on it to transact safely. This includes your username, your review score and your verification status.
8. Peer-to-peer shipping and address disclosure
Snifffr does not handle shipping. Sellers post items directly to buyers. This has consequences you should understand before ordering.
Buyers: your shipping name and address are disclosed to the seller so that they can post your item. We cannot control what a seller does with that information. Sellers are bound by our terms to use it only for fulfilment.
Sellers: you are not required to disclose your own address to the buyer. Note that postal markings may still indicate the general area from which an item was posted.
Undeliverable items may be returned, destroyed or held by the carrier, depending on the return address used.
We recommend all members use plain, unbranded packaging. Snifffr's name does not appear on any parcel.
9. Who we share information with
We do not sell your personal information.
| Recipient | Purpose | Location |
|---|---|---|
| Other members | Transactions, messaging, reputation | Worldwide |
| CCBill | Payment processing | United States |
| Unicorn Group | Payment processing | Switzerland |
| SegPay | Payment processing | United Kingdom |
| Wise | Seller payouts | Australia |
| Anthropic PBC | Automated message screening | United States |
| Sight Engine | Automated image moderation | France |
| AgeGo | Age verification | Spain |
| Payshield | Chargeback alerts | Australia |
| Help Scout | Support ticketing | United States |
| Google reCAPTCHA | Bot and abuse prevention on signup and login | United States |
| Amazon SES | Transactional and marketing email | United States |
| Amazon Web Services | Infrastructure | United States |
| Google Analytics | Site analytics | United States |
| Software development contractors | Platform development, maintenance and support | India |
| Professional advisers | Legal, accounting, audit | Australia, USA, UK |
| Law enforcement and regulators | Where legally required | Various |
We may also disclose information in connection with a merger, acquisition or sale of assets, subject to this policy continuing to apply.
Changes to our providers
We engage third parties in the categories listed above — payment processing, age verification, content moderation, fraud prevention, hosting, development, support and email delivery — and may add, replace or remove individual providers within those categories from time to time.
Some of our payment providers act as independent controllers of the data they handle, rather than as our processors, because they determine their own purposes including fraud screening, anti-money-laundering and card scheme compliance.
10. International transfers
Snifffr operates across three jurisdictions, and your information will be transferred internationally. Our staff in Australia may access your information, and some of our providers are located in the United States and elsewhere.
Our development contractors are located in India and have access to our production systems, including personal information about members, for development, maintenance and support. They are bound by written confidentiality and data protection obligations, and are permitted to access personal information only where necessary for those purposes.
Where we transfer personal information from the United Kingdom or the European Economic Area to a country that is not the subject of an adequacy decision — including Australia, the United States and India — we rely on one or more of the following, depending on the recipient:
- the recipient's certification under the EU–US Data Privacy Framework and its UK Extension, where applicable;
- Standard Contractual Clauses approved by the European Commission, together with the UK International Data Transfer Addendum; or
- the UK International Data Transfer Agreement.
Where we rely on contractual safeguards, we carry out a transfer risk assessment.
Transfers of Australian members' personal information overseas are made in accordance with Australian Privacy Principle 8, under which we take reasonable steps to ensure that overseas recipients handle your information consistently with the Australian Privacy Principles.
11. Cookies and tracking
We use:
- Essential cookies — login sessions, security, cart
- Age verification cookies — recording that you have confirmed your age
- Referral cookies — where you arrive via a member's referral link, we store that code for up to 60 days to attribute your signup
- Security — Google reCAPTCHA, used to prevent automated signups and login attacks
- Analytics — Google Analytics, used to understand how the site is used
We display a cookie notice to visitors in the UK and EU. If you do not wish us to use cookies, you can set your browser to disable them, though some parts of Snifffr may not work properly as a result.
Advertising
We do not use advertising or remarketing cookies, and we do not share information about your use of Snifffr with advertising networks.
12. Marketing
We send marketing emails only with your consent, and every email contains an unsubscribe link. Unsubscribing does not stop service messages such as order confirmations, security alerts or dispute notifications.
13. How long we keep information
| Data | Retention |
|---|---|
| Account and profile | Life of the account |
| Order transaction records | 7 years from transaction |
| Payout records (amounts, dates, payout handle) | 7 years from payout |
| Messages | Life of the account |
| Fraud and risk scores | Life of the account |
| Verification outcomes | Life of the account |
| Age verification documents | Not held by Snifffr |
| Snifffr verification photograph | Life of the account |
| Support tickets, including any documents you send us | Up to 5 years from ticket closure, including after your account is closed |
| Server and access logs | 90 days |
| Suspended or banned accounts | Retained to prevent re-registration |
When you close your account, we delete or anonymise your information within 30 days except where we must retain it for legal, tax, dispute or fraud prevention purposes. Reviews you wrote, and transaction records involving other members, may be retained in anonymised form.
Support tickets are retained for the period shown above even after your account is closed, so that we can evidence what was asked and answered if a dispute or complaint arises later.
Where information is relevant to an open dispute, chargeback, investigation, complaint or legal claim, we retain it until that matter is resolved, even where the period above has expired or the account has been closed.
Where we hold personal information that we no longer need for any purpose for which we may lawfully use or disclose it, we take reasonable steps to destroy or de-identify that information, unless we are required or authorised by law to retain it.
14. Your rights
All members
- Access a copy of your information
- Correct inaccurate information
- Delete your account
- Object to or restrict certain processing
- Withdraw consent
- Complain to a regulator
Contact [email protected]. We respond within 30 days (Australia) or one month (UK and EU).
We will need to verify your identity before we can action a request. This protects your information from being disclosed to someone impersonating you.
If you ask us to delete your personal information, we may no longer be able to provide you with the Snifffr Services.
UK and EU members
You additionally have the right to data portability, and the right not to be subject to solely automated decisions with significant effects (see Automated screening and fraud detection). Where we rely on legitimate interests, you may object, and we will stop unless we have compelling grounds to continue.
You may complain to the Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
United States residents
Depending on your state, you may have the right to:
- Know what personal information we collect, use and disclose
- Access a copy of your personal information
- Correct inaccurate personal information
- Delete your personal information
- Obtain your information in a portable format
- Opt out of the sale of personal information, targeted advertising, and profiling with significant effects
- Limit our use of sensitive personal information
We do not sell personal information, and we do not use it for targeted advertising or cross-context behavioural advertising.
Some states require your consent before we process sensitive personal information, which includes information about your sex life or sexual orientation. Where that applies, we ask for your consent when you create an account.
Appeals. If we decline your request, you may appeal by replying to our decision or contacting us at [email protected]. We will respond to your appeal within 45 days and explain our reasoning. If your appeal is denied, you may contact your state Attorney General.
You may use an authorised agent to submit a request on your behalf. We will need to verify both your identity and their authority.
We will not discriminate against you for exercising these rights.
Australian members
You may complain to us in the first instance. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Choosing not to identify yourself
We will give you the option of not identifying yourself, or of using a pseudonym, when dealing with us in relation to a particular matter, except where it is impracticable or unlawful for us to do so. You do not need to identify yourself to request general information about the Snifffr Services.
15. Security
We protect your information using:
- Hashed passwords
- Role-based access controls, limiting staff access to what their role requires
- Two-factor authentication on administrator accounts
- Regular patching of our infrastructure
- Regular backups
16. Children
Snifffr is strictly for adults. We do not knowingly collect information from anyone under 18. Our age assurance measures are described in Age and identity verification.
If we become aware that a minor has registered, we will terminate the account and delete the data immediately. To report a suspected underage account, contact [email protected].
17. Changes to this policy
We will notify members of material changes to this policy by notice on the platform before they take effect. Where a change is required urgently by law, or to address a security risk, we may make it immediately and notify you as soon as practicable afterwards. Where a change requires your consent, we will ask for it. We review this policy at least once a year.
18. Related policies
This policy should be read alongside:
- Terms and Conditions — snifffr.com/terms-conditions/
- Review Policy — snifffr.com/review-policy/
- Content Monitoring Policy — snifffr.com/content-monitoring-policy/
- Anti-Trafficking and Exploitation Policy — snifffr.com/anti-trafficking-and-exploitation-policy/
- 2257 Statement — snifffr.com/statement2257/
- Content Removal — snifffr.com/content-removal-complaint-form
