Privacy Policy

My Order Management (windyburg)
Private eBay seller workbench — controlled single-listing trial

Last updated: November 5, 2026

Operator and purpose

This application is operated by the owner of the eBay seller account windyburg for internal use. It verifies seller identity, reads listing summaries and US business policies, and supports non-publishing draft validation. A separate single-listing publication entry requires the seller's explicit approval of the reviewed draft before it can submit to eBay. It also receives marketplace account-deletion notifications. ERP stock changes and automated order fulfillment are not connected in this trial.

Information used

The account check processes the authorized seller's username or immutable account identifier. Its local report contains the expected account, returned identity, check time and verification result. The API response may contain other account fields, which the check does not output or save. The user access token is entered locally, used in process memory and is not saved by the account-check script.

The optional read-only store check saves listing IDs, titles, item and variation SKUs, and the listing site when returned, plus US payment, return and fulfillment policy names and IDs. A separate read-only policy review can save handling times, shipping services, shipping costs and regions, return periods, return shipping responsibility and immediate-payment settings. It excludes payment recipient account references. Reports also include scan completeness, error codes and exact-SKU match results. Raw seller API responses are not saved. User tokens are entered locally and used only in process memory. These reports and an account-linked report index remain on the operator's computer.

When the seller requests an origin check, the application can also read a sample of existing listings' item-location labels, country, site and postal code, including a complete postal code when eBay returns it to the authenticated seller. These are saved locally as references for reviewing a new listing's origin. They do not establish an account default or prove where another product is held. This check does not save street addresses, contact names, phone numbers or buyer addresses.

When the seller runs the optional non-publishing draft validation, the draft title, description, image URL, category, attributes, condition, SKU, price, quantity, confirmed item location and selected policy IDs are sent to eBay's VerifyAddFixedPriceItem API. This checks the draft definition and can return estimated listing fees without posting a listing. The local report saves draft parameters, validation status, numeric error or warning codes and fee estimates. User tokens and raw API responses are not saved. Validation does not reserve local stock or authorize publication.

After explicit approval, the separate publication tool can send that reviewed draft to AddFixedPriceItem to create one buyer-visible listing. It first rechecks seller identity, existing listings, selected policy terms and draft validation. Its local account-linked report records the approval reference, submission status, new listing ID and URL, returned fee fields, numeric errors and a readback summary. A minimal single-use submission marker prevents automatic resubmission when the outcome is uncertain. It does not create Amazon fulfillment orders, alter unrelated listings or update ERP stock.

The notification service receives deletion-event identifiers and, when provided by eBay, username, user ID and EIAS token. Account identifiers from these notifications are stored as encrypted payloads in Cloudflare D1 with a hashed notification ID, receipt time and processing status.

Use, hosting and access

Information is used for account verification, checking for existing listings, identifying existing business policies, service operation and review of account-deletion requests. Local reports remain on the operator's computer. Cloudflare Workers and D1 host the notification service and its records; Cloudflare Pages hosts this public policy; eBay supplies the API and notification data. Access to notification records requires an administrator credential. This application does not sell account information, use it for advertising or provide public access to account reports.

This privacy page sets no application cookies and includes no advertising, analytics or external scripts. Infrastructure providers may process connection metadata to deliver and secure their services.

Retention and deletion

Local account, store-check and publication reports remain until removed or replaced by the operator or processed through a matching deletion request. Minimal submission markers are retained to prevent accidental duplicate submissions. Pending notification records are retained for review. When a request is completed through the service, its encrypted account identifiers are cleared and a minimal processing record remains. Notification review and local cleanup currently require manual action; receipt of a notification alone does not mean cleanup has completed.

Control and contact

The seller can revoke this application's authorization through eBay. Revocation stops future authorized access but does not itself erase existing local reports or pending notification records. For privacy questions or deletion requests, contact the operator through the windyburg eBay profile. Do not send passwords, access tokens or application secrets.

Changes

This policy describes the current checks and approval-controlled single-listing trial. It will be updated before additional data categories or workflows are connected.