Mercari is a consumer-to-consumer resale marketplace app operated in the U.S. by Mercari, Inc. (US), a wholly owned subsidiary of Tokyo Stock Exchange-listed Mercari, Inc. (Japan, ticker 4385). The Mercari Group's privacy pages disclose that account creation collects name, date of birth, address, occupation, phone number, and payment/bank information, plus device, cookie, and OS-level data, and that this information may be used within Mercari, Inc. and its affiliated companies, explicitly including "Mercari, Inc. (US)." The policy discloses distributing third-party advertising both in-app and through external ad-distribution agencies, and Apple's App Store privacy label confirms Purchases, Location, Contact Info, and Search History may be used to track users across apps and websites owned by other companies, with a separate "Third-Party Advertising" purpose disclosed for data linked to identity. In May-August 2021, Mercari self-disclosed and published an investigation report on a Codecov supply-chain compromise that exposed a limited set of source code and personal information (27,927 total information records across marketplace users and employees), stating no confirmed damage or misuse was found after investigating with an external security specialist.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
COLLECTION
Mercari Group's privacy guide discloses that creating an account collects name, date of birth, address, occupation, phone number, nickname, email address, and password.
Mercari Group's privacy guide discloses that personal information is retained for as long as the user has an account, and for a further undefined 'designated amount of time' after account deletion to comply with law and handle inquiries.
Mercari Group's official corporate-information page lists 'Mercari, Inc.' -- linked to its 'Corporate Website' and 'Mercari (US Service)' at mercari.com -- among the group's formally disclosed subsidiaries, alongside Merpay, Inc. and Mercoin, Inc., under Tokyo-headquartered parent Mercari, Inc. (founded February 1, 2013).
Mercari Group's privacy guide discloses showing third-party advertisements within the Mercari and Merpay services and distributing ads through external advertisement distribution agencies.
Apple's App Store privacy label for the Mercari app lists 'Third-Party Advertising' as a purpose for which data linked to a user's identity (including Purchases and Location) may be used.
Mercari's own investigation report on the 2021 Codecov supply-chain compromise states that a follow-up investigation, conducted with an external security specialist, found an additional 13 marketplace-user records and 25 employee records exposed, bringing the cumulative total to 27,927 information records, with no damage or misuse discovered.
Mercari Group's privacy guide discloses collecting cookie information used to identify a user's browser, along with screen size, battery status, language, and other information obtained from the smartphone's OS.
Apple's App Store privacy label for the Mercari app discloses that Purchases, Location, Contact Info, and Search History data may be used to track users across apps and websites owned by other companies.