What we keep, what we don't.

VHPS Market is run by Victory Heights Primary School (VHPS), Dubai, as a community bulletin board. It exists so parents — and members of staff — can pass on outgrown uniforms, books, toys and other family items, and offer parent-run services to other families.

When you post a listing or service, we ask for:

• Your name (the parent name shown on the listing)
• Your child's year group (or "Staff")
• Your campus
• A WhatsApp number so buyers can contact you
• Your email — optional; only used to send you status updates and a magic-link to manage your listing
• The text and photos of the listing itself

When you subscribe to the bulletin, we store your email address and your optional campus preference. Nothing else.

We log basic counters per listing: how many times the page was viewed and how many parents tapped the WhatsApp button. We do not track who viewed what.

• No third-party advertising trackers
• No social-network pixels
• No analytics cookies that follow you across sites
• No precise location, no device fingerprint

The site uses two cookies: an HMAC-signed access cookie to remember you've entered the school code, and a per-listing manage cookie so you don't need to re-enter your edit code when editing your own listing. Both expire automatically.

• Listings and services are visible to anyone who has the school access code, plus anyone who clicks a deep link to a specific item (so previews on WhatsApp, iMessage etc. work).
• Your name, year group, campus, and WhatsApp number are shown on your listing — buyers need them to contact you.
• Your email (if you provided one) is never shown publicly. Only the school admin can see it; we use it only for the lifecycle emails listed above.
• The school admin can see every listing, every report, and every subscriber address. The admin password is held by school staff only.

VHPS provides this bulletin board only. The school does not handle payments, verify items, or take responsibility for transactions, disputes, or item quality. All arrangements are between parents.

That includes services. The school does not endorse or verify services listed here.

• You can edit, mark sold, or delete any listing of yours via the manage page (with your reference + edit code, or via the magic-link emailed to you).
• You can unsubscribe from the weekly bulletin any time via the link in every email — no questions asked.
• You can ask the school office to remove anything we have about you. Email [email protected].

• Listings: visible for 45 days, then auto-expire. Sellers can renew. Deleted listings are removed permanently.
• Subscriber emails: kept until you unsubscribe.
• Reports and admin logs: kept for moderation history.
• Backups: encrypted, retained for up to 90 days.

App and database are hosted on Railway (US/EU regions). Photos are stored on Cloudflare R2 (Asia-Pacific). Email is sent via Resend. All transit is HTTPS/TLS.

This site is intended for use by parents and school staff, not by children. We don't knowingly collect data from children.

For anything privacy-related, contact [email protected].