TrueVouchAlphaSign in
Connected communities · Reddit

Your Reddit trade record, carried with you

TrueVouch is a trust record for people who buy, sell, and trade collectibles with strangers. Every member verifies a government ID, deals are confirmed by both sides, and the record belongs to the member. Connecting a Reddit account lets a member show the trade flair the trading subreddits gave them, and the age of the account behind it, wherever they trade, with every mention linking back to Reddit.

The integration is built and waits on Reddit’s Data API approval. Nothing on this page is live for members until Reddit approves it.

What connecting does

You start it, from Settings. Reddit shows its own consent screen asking for two permissions, identity and read, you approve, and Reddit sends you back. TrueVouch reads your account and checks each trading subreddit on the list below for the flair it gave you. Your profile gets an account tile (your u/name, the year you joined, your karma) and one tile per subreddit where you hold flair or moderate, each marked as Reddit’s and linked to Reddit.

You choose what shows: hide any subreddit from your profile and show it again later. One Reddit account links to one TrueVouch record. Disconnect at any time from the same screen; our access is revoked at Reddit that moment, and the dated fact that a link ended stays on your profile.

What TrueVouch reads

  • Your Reddit account id and u/name, so one Reddit account links to exactly one TrueVouch record.
  • The date your account was created, shown as the year you joined.
  • Your karma totals.
  • Whether your email is verified with Reddit. Stored, not shown.
  • For each trading subreddit on the list below, and only those: the user flair that subreddit gave you, and whether you moderate it.

What it never reads

  • Your posts, comments, messages, votes, or saved items.
  • The subreddits you follow. We check only the list below, so the rest of your Reddit stays yours.
  • Anyone else’s flair, profile, or activity.
  • Your Reddit password. Sign-in happens on Reddit, never on TrueVouch.

The subreddits we check

Trading subreddits whose bots stamp a confirmed trade count into member flair. A subreddit joins the list only after we have seen its reference bot and its flair format on a real account. Never a subreddit marked 18+, and a subreddit that banned a member shows nothing for them.

How the data is handled

  • Standard OAuth 2.0 through Reddit’s consent page, scopes identity and read only. TrueVouch never sees a Reddit password.
  • The refresh token is stored encrypted (AES-256-GCM) under a key that lives only in the server environment. Access tokens are used for one read and discarded.
  • The record is refreshed once every 7 days, overnight, plus a Refresh now in Settings at most once an hour. Each refresh is one read per listed subreddit, paced, and it honors Reddit’s rate-limit headers.
  • The flair is display only. No Reddit number moves the TrueVouch trust score.
  • Disconnecting revokes the token at Reddit, deletes it here, and keeps only the dated fact that a link ended. Deleting your TrueVouch account removes every stored Reddit identifier.
  • Reddit content appears in its own tiles, marked as Reddit’s, and is never resold, never combined into rankings across members, never used to train a model, and cached only while the connection exists.
  • No scraping of reddit.com, no posting, voting, messaging, or any write of any kind.

For Reddit reviewers

The endpoints and scopes the application uses, and nothing else:

  • GET /api/v1/me identity: the member’s own account: id, name, created_utc, total_karma, has_verified_email.
  • GET /r/{subreddit}/about, once per listed subreddit read: the member’s own user_flair_text and user_is_moderator in that subreddit; a banned member or an over-18 subreddit yields nothing.
  • POST /api/v1/revoke_token none: called the moment a member disconnects.

A member-authorized OAuth web app, registered under Jordan’s own account, u/larrigan, with the redirect URI https://api.truevouch.com/v1/connectors/reddit/callback and the user agent web:com.truevouch.api:v1.0 (by /u/larrigan). Call volume is small: about ten requests when a member connects, and the same once a week per connected member. The app runs on our servers and reads only the member’s own data with their token, which is why it is not a Devvit app.

Who builds it

TrueVouch is built by two collectors who trade themselves. Jordan Larrigan runs The Poké Garden on eBay and Josh Decker sells as rain_city_cards; the two ran Tagboard together as CEO and CTO for ten years before this. TrueVouch, LLC is a Washington company in Redmond.

Jordan on LinkedIn · Josh on LinkedIn · josh@truevouch.com

How TrueVouch handles every kind of data, connected accounts included, is in the privacy policy. The eBay connection has its own page at /ebay.

TrueVouch home
Reddit integration · TrueVouch