Privacy policy

Last updated October 13, 2026

Stallmark record pages show horses, vehicles and collectibles, and help their owners see who is interested and what they look at. This page says what is recorded, what never is, who sees it, and how long it is kept.

On every record page

• A visitor ID. A random ID kept in a cookie. It is set again on each visit and lasts two years from your last one. It holds no name.
• Each visit: the time, your device type, the city, region and country worked out from your connection (never your exact location), the tag in the link or printed code that brought you, whether you have been before, and up to 200 characters of the address of the page that sent you.
• What you do: the sections you view and for how long, time on the page, videos you play and how far, photos you open, and buttons and links you tap, such as save, share, add to calendar, contact details and listings. Forms you open, reactions you give, and answers to the short questions on the page.
• The find box: when what you type matches a page, the first 60 characters of it.
• Printed codes: when you scan one, your visitor ID, device type, city, region, country and your browser's language setting.

In more detail, where the owner turns it on

On pages where the owner has turned it on, Stallmark also records how you take in each part of the page. Each photo, clip, highlight and paragraph has a number, and what you do is recorded against that number:

• Videos: each second you play, replays, skips, pauses, speed, sound on or off, full screen, stalls, and whether the tab was in front of you.
• The page: which parts were on your screen and for how long, and how fast you scrolled or scrolled back.
• Photos: which you opened, for how long, and which square of the photo you zoomed into.
• Text: if you select or copy text, its word positions in the page, not the text itself.
• Taps on buttons, links and proof.
• Forms: which form you opened, the order you reached its fields, the time in each, whether each was left filled or empty, and whether you sent it or closed it. Nothing you type is read until you press send.
• The visit: whether the tab was in front, whether you were idle, time active and time hidden, how the page was opened (a link, a reload, the back button), the browser family, a rough screen size, connection speed and data saver when your browser reports them, and whether the browser is run by software.
• Each event also carries its time, your device type, and the city, region and country worked out from your connection.
• Where you came from: the kind of site that sent you (search, social, AI assistant, email or other) and its name when it is a well known one. In this record, never the other site's address.

This record is kept under its own random key, which Stallmark can match to your visitor ID. If your browser sends Global Privacy Control, this record gets no such key, so your visits are not linked to each other in it. Your visitor ID cookie and everything in the section above work as usual.

Never recorded

Keys you press. Anything you type and don't send. Screen images, recordings of your visit, pointer trails or where you tap. Your exact location. Your camera, microphone, contacts or clipboard. Your full browser identification string. Device fingerprints. Your connection address, except as a coded daily count for the Ask box, described below.

No outside tracking code runs on these pages, and Stallmark's own fonts and scripts come from Stallmark. A few things load from other sites: a clip posted as a YouTube link plays in YouTube's player, card photos taken from a grading company's certificate load from that company, and the pictures in link previews and in "where to buy" listings load from those sites when you scroll to them.

Things you choose to give

• Messages, follows and live check requests: your name, phone or email, your message, an offer amount or topics if you give them, along with your visitor ID, device type, place and the tag that brought you.
• Answers to the short questions are kept by your visitor ID with the page you gave them on, and only that page's owner sees them.
• Questions you type into the Ask box, on pages that have one. They go to our AI provider to be answered, with the page's text and still frames from its clips, or with saved web search results. We keep each question and answer, with no end date, so the same question can be answered again. To limit free questions, each day keeps two counts: one under a code made from your visitor ID and one under a code made from your connection address, each with a key that is new every day. The counts and the keys are deleted after two days.
• Share links: if you share a page with your own share link, the owner sees how many people it brought, with your name if your browser also sent a message.
• Saved searches: your phone, email or notification address. Stopping an alert stops the messages; the saved search is kept.

Who sees it

• The owner of the record sees each visitor as a row in their dashboard: place, device, first and last visit, days visited, how they came in, answers to the short questions, sections read and recent activity. There is no name unless you gave one. Where the detailed record is on, the owner also sees what was looked at, part by part.
• If you send a message, follow, or ask for a live check with your name, the owner sees your name and contact beside what your browser looked at on the page. The forms say so before you send. The owner can download messages and follows.
• Questions: if you choose to show your question on the page, the question and the owner's answer are public. The owner can also choose to show a question and its answer, and may reword the question. Your name and contact are never shown.
• Live checks: a filmed check on the page says it was asked by a visitor in your state.
• A report the owner shares by link shows no names, places, activity, answers or quotes. It shows totals, where visits came from, including other sites' names, captions, how many people each share link brought, and the average and best offer. The link works for 30 days and can't be withdrawn sooner.
• Stallmark can see all of it to run the service.

We don't sell any of it or share it with advertisers.

Alerts to owners

Owners get alerts by email, by notification, and through any chat or automation service they connect. Alerts carry a message's name, contact, words and any offer, a follower's name, contact and topics, a visitor's stated budget and interest when they say they are buying now, a "would buy" reaction, the first scan of a printed code each day with the city and region, and a weekly report that may name a visitor who gave their name.

Kept on your device

Your visitor ID cookie, your saved list, reactions you gave, including on live checks, whether you skipped the short questions, whether notifications are on, your share link ID, where you were in a video, and when you last visited.

Notifications

If you turn on notifications, your browser gives us a delivery address for that device. We use it only to send updates about records you follow and alerts for searches you saved. Turn them off any time in your browser settings.

Owners

Owner accounts store name, email, phone and a securely hashed password. Payments are handled by our payment processor; we don't store card numbers.

Keeping and deleting

• The detailed record has no end date and is never changed or removed, including when a page is changed or removed. The key that matches it to visitor IDs is kept too.
• When an owner deletes a page from its editor, or their whole account from the Account page, the page's photos, videos, codes, visit log, scans, messages, follows, answers to the short questions, share links, notification addresses and live checks are removed.
• Kept after a page is deleted: a copy of each alert in the owner's alert log, until the owner's account is deleted; notes on each visit in the detailed record; saved searches; Ask box questions and answers; code orders and sign ups; the chat on the FreeRein training page with any contact details given there; and payment records, for accounting.

If you want your messages, follows or answers deleted, text 907-406-5514 with the record name and the phone or email you used. We find answers through a message or follow sent from the same browser.

Services we use

Netlify (hosting every request, and storage for Ask box counts and answers, visit notes and copies of alerts to Stallmark), Supabase (database), Resend (email: alerts to owners, and saved search alerts to your own address), browser notification services (alerts to owners, updates to followers and saved search alerts), Anthropic (AI: Ask box questions, the training chat, and a message's name, place, words and any offer when an owner asks for a reply draft), Twilio (texts to a code number), Stripe (payments), YouTube for clips posted as YouTube links, and any chat or automation service an owner connects, such as Slack, Discord, Zapier or Make, which receives the same alerts as the owner. They process data only to provide their service to us.

Terms of service