Privacy

The short version

We collect what we need to run a market and nothing else: an email address if you join the list, a message if you write to us, and an application if you want to sell. There is no analytics script on this site, no advertising pixel, and no tracking cookie. We do not sell your information and we never will.

One thing is worth knowing before you upload anything: the photographs you attach to an application are stored so that anyone with the link can open them. More on that below.

If you join the mailing list

We store your email address, which form you used, and the date. That is the whole record.

We send about six emails a year: show dates, when applications open, and the roster. To come off the list, write to hello@mermademarket.com and you are off it the same day. There is no self-service unsubscribe page yet.

If you write to us

The contact form and the collaborate form take your name, your email address and your message. All three are emailed to us and stored, so that a message is never lost to a delivery failure. Staff can read them in the admin.

If you apply to sell

This is the longest list on the page, because an application is the one place we ask for real detail. We store:

• your shop name, your name, your email address and your phone number;
• your Instagram handle, your website, and your city and state;
• which track and which spaces you asked for, and any add-ons;
• your category, your description of your work, and your price range;
• your answers on who makes your goods, on AI-generated artwork, and on multi-level marketing;
• your seller’s permit number if you gave one, or that you told us you are an occasional seller;
• whether you told us you carry liability insurance;
• any photographs you attached;
• the name you typed to sign the maker agreement, the version you signed, and the date and time.

Phone numbers are for load-in day, which runs on text messages. The permit number is a compliance record we are required to keep: CDTFA Publication 111 makes an event operator keep it for four years.

If you are accepted and you pay, your shop name and your public handles appear on the roster page. Your email address, your phone number and your permit number do not, and never will.

Photographs, and the one thing to know about them

Photographs attached to an application are stored in a bucket that is readable by anyone who has the exact link. There is no login in front of them. We do it that way because the jury looks at hundreds of images in one sitting and a private bucket makes that slow enough that a juror stops using it.

The links themselves are random, and they carry no name, no email address and no filename of yours, so there is nothing in the address to guess and no listing to browse. Even so: treat an application photograph as public, and send us work, not anything you would not put on your own feed.

Identity documents are a different thing and are handled differently. Permits, W-9s and anything similar are never put in that bucket.

Who else touches it

Only the companies that run the plumbing, and only for what they are for:

• Supabase, which hosts the database and the photograph storage;
• Vercel, which serves the site and keeps ordinary server logs;
• Resend, which delivers the email we send;
• Google Sheets, where the team reads new applications;
• YouTube, on the pages that carry a film.

The Google Sheet gets less than the admin does, on purpose, because a spreadsheet link gets forwarded. It carries your shop, contact name, email, phone, Instagram, website, city, state, category, track, the spaces and add-ons you asked for, your price range, your three yes-or-no answers and your description. It does not carry your seller’s permit number, the name you signed with, or anything the jury wrote about you.

We do not sell personal information, we do not share it for anyone else’s advertising, and there is no third party on this site collecting anything of its own.

Cookies and what is stored in your browser

There is no analytics, no advertising and no tracking cookie on this site. The fonts and the images come from our own server, not from someone else’s.

What is actually stored:

• two cookies for staff who are signed in to the admin, one for the session and one that turns on a launch preview. Neither is set for anyone else;
• one item in your browser’s local storage, so that the newsletter popup you dismissed stays dismissed for a while;
• anything YouTube stores if you play a film. Those are embedded through youtube-nocookie.com, which holds off until you press play.

Do Not Track: we do not track you across sites, so there is nothing here for that signal to change.

How long we keep it

Applications and maker records are the market’s own history and we keep them: who applied, who was accepted, who sold, at which show. Permit records are kept four years, which is what CDTFA Publication 111 requires. Mailing list entries stay until you ask to come off. Messages sent through the contact form stay in the admin so an old thread can be found again.

What you can ask us for

Write to hello@mermademarket.com and we will tell you what we hold about you, correct it if it is wrong, and delete what we are not required to keep. We will not ask you to explain why.

Two California notes. We do not disclose personal information to third parties for their own direct marketing, so a Shine the Light request has nothing to return. And we are a small business, well under the thresholds that trigger the CCPA, but we answer requests the same way regardless of whether a statute makes us.

Children

This site is not aimed at children and we do not knowingly collect anything from one. Junior maker spaces are real, and the application for one comes from a parent or guardian, who is also the person who signs the maker agreement.

Changes

This page is version 2026.1, last updated September 5, 2026. If we change what we collect or where it goes, we change this page and the date on it before the change ships.