Privacy Policy
Last updated: July 10, 2026
Introduction
ItemsToFlip ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application.
Information We Collect
Search Queries
Ordinary search results may be cached for up to 24 hours to improve performance and reduce API calls. If a mailbox-verified Pro user deliberately creates a Deal Alert, we retain that saved query, its optional maximum landed cost, consent timestamp, and delivered-listing deduplication state for the life of that saved alert. Deleting the alert or using stop-all opt-out deletes its associated delivered-listing IDs.
Pro Account, Billing, and Email Information
We process the email address you provide to identify a Pro entitlement, verify control of the Deal Alert mailbox, deliver requested account or Deal Alert email, and provide billing management. We store subscription identifiers, status, plan cadence, and related consent state. Stripe processes payment-card details; we do not receive or store your full card number.
Usage Data
We collect basic usage information such as search patterns, page views, affiliate-link clicks, ad interactions, and feature usage to improve our service, measure performance, and understand which tools are useful.
eBay Data
We retrieve product listings from eBay's API and display them to you. This data is cached temporarily (24 hours) to improve performance. We do not store eBay user data or personal information.
How We Use Your Data
- To provide and improve our market analysis service
- To cache search results and reduce API load times
- To analyze usage patterns and improve user experience
- To administer Pro subscriptions and provide billing-management access
- To verify Deal Alert consent, run saved searches, deliver requested alerts, and honor opt-outs
- To comply with eBay API requirements and policies
Data Retention
Ordinary cached search results and eBay listing data are generally retained for up to 24 hours. Saved Deal Alert queries and consent records are retained while the alert remains active and are removed when the alert is deleted or unsubscribed.
Delivered-listing deduplication IDs have no fixed count cap or time-based expiry. They are retained for the life of the saved alert so an old listing is not sent again, then removed when that individual alert is deleted or stop-all deletes all saved alerts. One-time verification and billing links expire after about 15 minutes. A mailbox-verified browser session lasts up to 30 days, and the signed Pro email session lasts up to 90 days. Subscription and transaction records may be retained as needed for billing, fraud prevention, accounting, dispute handling, and legal obligations. Opt-out suppression may be retained so we can continue honoring it.
eBay User Data Deletion
In compliance with eBay's Marketplace Account Deletion/Closure Notification requirements, we handle user data deletion requests as follows:
- We do not store eBay user account information or personal data beyond temporary caching
- All cached data is automatically purged after 24 hours
- If you wish to request immediate deletion of any cached data, please contact us
Cookies
We use essential cookies to maintain sessions, remember preferences, and keep Pro account features working. We also use analytics, advertising, and affiliate measurement technologies, including Google Analytics, Google AdSense, Vercel Analytics, and first-party affiliate measurement cookies.
Third-Party Services
eBay API
We use eBay's Browse API to retrieve product listings. Your use of ItemsToFlip is subject to eBay's Privacy Policy.
Google Analytics and AdSense
We use Google Analytics to understand page views, feature usage, affiliate-link clicks, and other usage patterns. We use Google AdSense to serve ads and measure ad performance. These Google services may use cookies or similar technologies.
Vercel Analytics
We use Vercel Analytics for aggregate site usage and performance trends, such as page views and basic traffic patterns, so we can improve ItemsToFlip.
Sentry
We use Sentry for error monitoring. When something breaks, Sentry receives error reports, stack traces, request context, browser and device details, your IP address at the time of the event, and related diagnostic data.
Sentry also records a small sample of visits (about 10%) through its Session Replay feature, even when nothing goes wrong. Replays capture page structure and interactions so we can debug problems. All text is masked and all media is blocked before a replay leaves your browser.
Stripe
Stripe hosts checkout and the billing portal and processes subscription and payment information. We receive identifiers and subscription status needed to grant, reconcile, or revoke Pro access.
Resend
Resend processes the recipient address and message content for requested mailbox verification, billing-management links, and approved Deal Alert delivery.
Vercel and Upstash
Vercel hosts the web application and Upstash provides the key-value storage used for Pro entitlements, saved alerts, consent, one-time tokens, opt-out state, and delivery deduplication.
Data Security
We implement industry-standard security measures to protect your data, including HTTPS encryption, secure API credentials, and regular security audits. However, no method of transmission over the internet is 100% secure.
Your Rights
You have the right to:
- Request information about what data we have stored
- Request deletion of any cached search data
- Delete individual saved alerts or use an email opt-out to stop Deal Alert messages
- Request information about, correction of, or deletion of Pro/Deal Alert data, subject to legal retention duties
- Use browser or device controls to limit cookies and similar technologies
- Ask questions about our data practices
Children's Privacy
ItemsToFlip is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: