Privacy at Point and Sell

Point and Sell is run by Winston Burbage in Chandler, Arizona. Questions go to [email protected].

What we keep, and why

• Your email address, to sign you in (a link or a six-digit code by email; there is no password) and to send sign-in, account and (unless you untick it) product-news emails.
• Which of our links you arrived through, kept with your account.
• Your settings, including the item location and postal code that go into every listing you build.
• Your photos (with each one's file name and the time it was taken), the listings you approve, and the listings read from the reports you upload (item number, title, custom label, price, quantity, watchers; the report files themselves are not kept). That is the product: your listings are built from them.
• From an eBay orders report, the order number, item number, title, custom label, price, quantity and date of each sale you record. Never the buyer.
• If you connect your eBay account, a permission from eBay, which we use only to read your listings and orders, stored encrypted, and your eBay user ID. You can disconnect at any time, and the permission is deleted when you do.
• Your plan and Stripe's customer number. Card details go to Stripe and never reach us.
• If you use the collection: what you enter for each item, including the price paid, purchase date, grading certificate number and notes.
• For affiliates: the payout email and Stripe's account number. Bank and tax details go to Stripe and never reach us.
• Your browser's user-agent string with each sign-in; deleted a day after the session expires.
• The address a visit came from, for three things: limiting sign-in attempts (about a day), counting a visit from one of our links once a day (about three days), and a one-per-day visitor count that stores only a scrambled form of it.

Every "kept N days" on this page is swept when the service starts, which happens with every update of the site, several times most weeks. So "a day" means a day, then the next restart.

Who else sees it

• Anthropic, the maker of the Claude model, reads your item photos to identify each comic, book, record, game or figure.
• Cloudflare stores your photos and serves them to eBay, and sits in front of the site.
• Postmark sends sign-in and account emails. Stripe takes payments. Render hosts the site and its database.
• Unless you turn the price guide off in Settings, PriceCharting receives each comic's series and issue number, and each game's or figure's barcode or title. Open Library and Google Books receive a book's ISBN.
• eBay, if you connect it, and only in the other direction: we read your listings and orders, we never send anything.
• If you signed up through an affiliate's link, that affiliate sees whether your account is paying and the commission each of your charges earns them, never your address.

We do not sell your data.

Cookies

One to keep you signed in (60 days). One that remembers which of our links brought you here (30 days, 90 for an affiliate's link). One that says a visit has been counted today (a day). One that says an account was just created (ten minutes). If we run Google Ads, Google's own tag and its cookies load on our public pages (welcome, pricing, FAQ, about, sign-in, credits and the guides) for visitors who are not signed in, and on the first page you see after creating an account, once. Otherwise never on the pages you work in.

Your photos

Photos are stored on a public bucket at addresses nobody can guess: anyone with a photo's address can open it, which is how eBay shows your listing's pictures. When a photo is cropped, the photo as you shot it is kept beside the cropped copy so you can undo the crop; once a batch is approved, those uncropped originals are deleted after 30 days. Photos of an upload that never finished uploading are deleted after seven days. A batch that uploaded but was never approved keeps its photos until you delete it. The listing photos of an approved batch are kept, because your live eBay listings show them.

Shops with several people

On the Shop plan an account's owner can add other people's addresses. If yours is added, you are asked the first time you sign in whether to join. If you join, what you add there belongs to the shop's account, the batches you start carry your address, the owner sees when you last signed in, and the owner can remove you. If you say no, you get an account of your own.

How long we keep it, and deleting your account

Your listings, sales, collection and settings are kept while you have an account. To have your account and everything in it deleted, email [email protected] from the address you sign in with. If you are on a paid plan, cancel it first, or ask us to. We delete everything at once except three things. The listing photos your approved batches' eBay listings display follow 90 days later, so listings still live on eBay do not lose their pictures overnight. An empty account record stays with Stripe's customer number on it, because Stripe keeps your past charges and a refund must still find them; if an affiliate referred you, their record of the commissions your charges earned stays too. And if an address has ever bounced or unsubscribed, we keep it on a do-not-send list so it is never mailed again. Copies already held by Stripe, Postmark, Anthropic and eBay are theirs, under their own policies. A shop member's address is removed by the shop's owner.

Product news

Untick the box when you sign in, or use the unsubscribe link in any news email. Sign-in emails and receipts are not news and still arrive.