Your test trade, reviewed together

Private beta rules · version beta-photos-2026-10-19

This feature rehearses an exchange between two collectors. It does not authorise payments or shipping. Both collectors pay £0.00; cash top-ups are disabled. Future Tradle service commission is separate from the collectors’ exchange and has not been activated.

What you accept

Review the exact card details and every view of every physical copy. The beta uses copy 1, then 2, and so on. Each collector must tick both checkboxes themselves. No photo bytes are copied into a separate record until both accept the same version. Changes to the card, photos or terms require a new review by both collectors.

When both accept, Tradle reserves the collection records for this test trade and saves the processed photos as they were at acceptance. These are not certified images, authenticity checks, guaranteed condition, legal signatures or proof of delivery.

Who can see the record

Only the two signed-in, eligible participants can view it through the app. A disabled or family-flagged participant blocks viewing. The feature does not add public photo links or staff access screens. Operators with database access can access stored data; this is not end-to-end encryption.

How long it lasts

An open review screen must be refreshed after 15 minutes before signing. A pending review expires after 24 hours. A record accepted by both collectors expires 30 days after the second acceptance. Exact retries do not extend either deadline. Expired records cannot be opened; cleanup runs at startup and every minute while the server is running. If the server is offline, cleanup resumes when it starts.

Expiry cancels an unfinished agreed test trade and releases its reservations. It does not reverse a completed test movement between binders. This 30-day period is a temporary beta product rule, not a statutory retention period or the final policy for real exchanges.

Remove it sooner

Open My trades → Inspect shared photos (or Photo record on a closed trade), then choose Remove record & withdraw. Either collector can remove the entire record, including the other party’s recorded acceptance. Before both accept, use Withdraw my review.

Removing an accepted record cancels an unfinished agreed test trade and releases its reservations. A completed binder movement is not reversed. The normal trade history remains; it does not contain the retained images or their fingerprints.

Library photos and accepted records are separate. Retaking, unsharing or deleting a library photo does not remove an accepted record. Deleting a record does not delete either owner’s original library photos. Copies someone has saved to their own device cannot be recalled.

Backups and recovery

Temporary photo review records are excluded from Tradle’s checked backup bundles. Recovery from those bundles cancels unfinished photo-backed test agreements and requires a fresh review. Keep your original photographs: this is not a permanent archive.

Original private-library photos are still included in confidential backups and have separate retention. Hosting infrastructure may retain recovery copies; these are not accessible through the app. Any infrastructure recovery must clear temporary reviews before reopening the service. Off-host backup retention and operational verification are still launch requirements.

Before real trades

Real exchanges need reviewed terms, a lawful retention basis, an erasure and dispute process, provider approval and operational safeguards. This beta does not automatically impose legal holds or retain evidence indefinitely. Statutory rights and Tradle’s own duties remain. No independent dispute provider has been appointed.

Trading responsibilities and disputes · iPhone photo walkthrough