Privacy policy

SriSales LK (srisales.lk) is a Sri Lankan classified advertising platform. For questions about your data, contact srisaleslk@gmail.com.

When you sign in

We use Firebase Authentication with Google Sign-In. From your Google account we receive your name, email address and profile picture. We never see or store your Google password.

What you give us

• Profile details you enter: display name, bio, phone number, address, district and postal code.
• Listing content: titles, descriptions, prices, locations, contact numbers and photos.
• Seller verification details, when you apply to become a verified seller.

What is generated as you use the site

• View counts on listings, recorded once per visitor per listing per 24 hours.
• Which listings you have saved and which sellers you follow.
• The time of your last sign-in.

A listing is an advertisement — it is meant to be seen. When you publish one, the following becomes publicly visible and is indexed by search engines:

• Your display name, profile photo, @handle and verified status.
• The listing title, description, price, photos and location.
• The contact phone number you put on the listing.
• Your district and bio, if you added them to your profile.

Your email address, postal code and full street address are never shown on a listing.

• To publish your listings and show them to the right people.
• To let buyers contact you, and to let you save listings and follow sellers.
• To review listings and applications, and to prevent fraud and abuse.
• To show advertising that keeps the platform free.
• To keep the service running, secure and available.

We do not sell your personal data, and we do not send marketing emails.

These are the third-party services this website actually uses, and what each one handles:

Photos are uploaded through our own proxy so that the Cloudinary credentials never reach your browser. Because these providers operate globally, your data may be processed outside Sri Lanka.

Strictly necessary

Required for the site to work and always active: your Firebase Authentication session, your theme choice, your cookie preference itself, your recent searches, and the record that stops a listing view being counted twice in 24 hours. Most of these are stored in your browser’s local storage rather than as cookies, and none of them are shared with anyone.

Advertising and analytics

Off until you turn them on. We implement Google Consent Mode v2, so before you consent, AdSense serves non-personalised adverts and stores no advertising identifier. Adsterra has no equivalent mechanism, so its script is not loaded at all unless you opt in.

Cookie preferences

• Your profile stays until you ask us to delete your account.
• Listings stay until you delete them or we remove them.
• Saved listings and follows stay until you undo them.
• Local storage on your device stays until you clear your browser data.

You can, at any time:

• See and edit your profile details from the profile page.
• Edit or delete any listing you have posted.
• Change or withdraw your cookie consent.
• Ask us for a copy of your data, or ask us to delete your account entirely.

For the last one, email srisaleslk@gmail.com from the address on your account. We will confirm within a reasonable period.

Data is transmitted over HTTPS and access to the database is governed by server-side security rules rather than by the app alone. No system is perfectly secure, so please do not put sensitive personal information into a listing description.

SriSales LK is not intended for anyone under 18. If you believe a child has created an account, contact us and we will remove it.

We will update the date at the top when this policy changes. If a change introduces a new category of cookie, you will be asked for your consent again.