Privacy Policy
Last updated: May 25, 2026
This policy explains how Instant Listing Alerts ("we," "our," or "us") handles personal information when you use our platform. By accessing or using the service, you agree to the practices outlined below.
Your Consent
By using Instant Listing Alerts, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree with these terms, please discontinue use of the service.
Information We Collect
We gather information directly from you, from third-party services, and automatically through the platform.
Account and Profile Data
When you create an account, we collect your name, email address, and password. Your password is cryptographically hashed before storage and is never saved in readable form. You may browse the site anonymously without creating an account.
Saved Content
We store the content you create within the platform, including saved search configurations (keywords, categories, price ranges, conditions, seller filters, location preferences) and excluded seller lists.
Third-Party Service Providers
- eBay: We access eBay's public listing data through their official APIs under the eBay API License Agreement. Search criteria you configure is transmitted to eBay's servers to retrieve matching listings. We do not access your eBay account or store any eBay login credentials.
- Email providers: Alert notifications and account-related emails are delivered through SMTP email services, which may provide us with delivery and bounce status information.
Automatically Collected Data
We collect certain information automatically when you use the platform, including IP address, browser type, device information, timestamps of visits, and pages viewed. We use a session cookie to maintain your login state. We do not use third-party tracking pixels, analytics tools, or advertising beacons.
Communications
We maintain records of alert emails sent to you, including delivery status and timestamps, to ensure proper operation of the notification service.
How We Use Your Information
We do not sell your personal data to anyone. Your information is used for the following purposes:
- Delivering the Service: Monitoring eBay listings based on your saved searches, sending alert notifications, and responding to your requests.
- Security and Fraud Prevention: Detecting unauthorized access attempts, enforcing account lockout after failed logins, and investigating suspicious activity or policy violations.
- Platform Improvement: Analyzing usage patterns to evaluate performance, troubleshoot issues, and improve reliability of the service.
- Account Administration: Authenticating your identity, processing password resets, handling email changes, and managing your subscription.
- Legal Compliance: Meeting applicable legal obligations and responding to lawful requests from authorities.
We do not use eBay data to train algorithms, build machine learning models, generate synthetic datasets, or develop artificial intelligence systems of any kind.
How We Share Your Information
Service Providers
We may share limited information with third parties that help us operate the service, including email delivery providers and eBay (via their APIs). These providers only receive the data necessary to perform their specific function.
Legal Obligations
We may disclose your information if required to do so by law, or when we believe disclosure is necessary to comply with legal process, enforce our agreements, or protect the rights, property, or safety of our users or others.
Business Transfers
In the event of a merger, acquisition, asset sale, or similar business transaction, your information may be transferred as part of that deal. We would notify you of any such change and any choices you may have regarding your data.
Your Content
Your saved searches and personal configurations will not be shared with any outside party. When performing searches on your behalf, only the necessary search parameters are sent to eBay through their API — no personally identifiable information is included in these requests.
Cookies and Tracking
We use a single session cookie to keep you logged in. This cookie is:
- HTTP-only, meaning it cannot be accessed by client-side scripts.
- Set with the SameSite attribute to guard against cross-site request forgery.
- Configured to expire after 30 days of inactivity.
- Marked as Secure when served over HTTPS.
We do not employ third-party cookies, tracking pixels, clear GIFs, or analytics platforms such as Google Analytics. No advertising cookies or personalization trackers are used on this platform.
Advertisements
Free-tier accounts may see non-personalized informational content within alert emails. We do not serve targeted or behavioral advertising, and we do not share your data with any advertising networks.
Safeguarding Your Information
We employ multiple layers of security to protect your data, though no system connected to the internet can guarantee absolute security. We encourage you to use a strong, unique password and to keep your login credentials private. Our measures include:
- Passwords hashed with bcrypt and per-user salt before storage.
- CSRF token validation on all form submissions.
- Rate limiting on authentication and sensitive endpoints.
- Automatic account lockout after repeated failed login attempts.
- Content Security Policy headers to restrict resource loading.
- Server-side session management with no sensitive data in cookies.
- Sanitization of all externally sourced content to prevent injection attacks.
- API credentials stored securely as environment variables, never exposed in logs or to clients.
Data Retention
Information is retained while your account remains active or as needed to provide services, comply with legal obligations, and resolve disputes. Specific retention periods are:
- Account data: Kept for the lifetime of your account. You may request deletion at any time.
- Listing data and alert history: Purged automatically after 30 days.
- Login records and email logs: Purged automatically after 90 days.
- Aggregate usage statistics: Purged automatically after 365 days.
When you delete your account or request data removal, all personal information and associated records are removed within 10 days.
Accessing and Modifying Your Information
You can review and update your account details at any time by logging in and visiting your account settings. From there you can:
- Change your email address or password.
- Edit or remove any saved searches.
- Manage your excluded sellers list.
- Deactivate individual searches to stop receiving alerts without deleting them.
Your Choices
- Alert Emails: Each alert email includes a link to deactivate that specific search. You can also pause all email notifications from your account settings.
- Account Deactivation: You may deactivate your searches at any time to stop receiving alerts while preserving your configuration.
- Account Deletion: To permanently delete your account and all associated data, contact us through the address listed on this site.
- Content from eBay: Search results and alert content originate from eBay listings. We have no control over the nature of items listed on eBay's marketplace.
International Data Transfers
Our service operates from servers that may be located in a different jurisdiction than your own. By using the platform, you acknowledge that your information may be transferred to and processed in countries that may not have the same level of data protection as your home jurisdiction. We take appropriate steps to ensure your data is treated securely and in accordance with this policy and applicable laws including GDPR, UK GDPR, CCPA/CPRA, and other relevant data protection regulations.
Children's Privacy
This service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 13, in compliance with COPPA. If we discover that a minor has provided personal data, we will delete it promptly. If you believe a child has submitted information to us, please get in touch so we can address it.
Links to External Sites
Our service contains links to eBay listing pages and may link to other third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policy of any site you visit through links on our platform.
California Privacy Rights
If you are a California resident, you may request information about whether we have disclosed personal data to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.
eBay API Compliance
This privacy policy is consistent with the eBay User Privacy Notice. We do not process personal information obtained through eBay's developer tools in any way that eBay itself is not permitted to. We comply with eBay's marketplace account deletion requirements and remove associated data promptly when notified. We do not aggregate, resell, or redistribute eBay content, nor do we derive market statistics, pricing models, or competitive analyses from it.
Updates to This Policy
We may revise this Privacy Policy periodically. When material changes are made, we will update the date at the top of this page and may notify you through the service or by email. Your continued use of the platform following any changes signifies your acceptance of the revised terms.
Contact
If you have questions or concerns about this Privacy Policy, or if you wish to exercise any of your data rights, please reach out to us through the contact information available on our website.