Privacy Policy

Last updated 14 August 2026

This policy covers ListChute, an independent eBay listing tool operated by Glitch Fix Designs ("we", "us"). It describes what we collect, why, who else sees it, and what you can do about it. It applies to the app at /app and to these marketing pages.

The short version. We store your account details, the photos you upload, and the listings built from them. Your photos are sent to Google Gemini so it can describe the item. Your listing content and photos are sent to eBay when you publish. Your eBay access token is encrypted before it is stored, and we never see your eBay password. We do not sell your data or run advertising.

1. Information we collect

Account information

When you register we store your email address and, if you sign in with Google, the name and profile details Google returns. Authentication is handled by Firebase Authentication; if you use a password, Firebase stores it in hashed form and we never have access to it.

Content you create

Photos you upload, stored in Google Cloud Storage in a folder scoped to your account.
Listing data — SKUs, titles, descriptions, categories, conditions, item specifics, prices, quantities, auction settings, and the eBay offer and listing identifiers created when you publish.
Any notes you type into the optional "anything the photos don't show" field, which is passed to the AI along with your photos.

Seller settings

Your ship-from address, used to create an inventory location on eBay.
Package weights and dimensions, SKU prefixes and shipping presets.
Your chosen default eBay shipping, return and payment policies.
Display preferences such as theme and accent colour.

Your eBay connection

If you connect an eBay account we store the OAuth access and refresh tokens eBay issues, encrypted at rest, along with your eBay username and, where eBay provides it, your registration address and store subscription level. The token exchange happens on our server, not in your browser. We never receive or store your eBay password.

We also keep a record linking an eBay account to the ListChute account that claimed it, and we log attempts to bind an already-claimed eBay account to a different user. This exists to stop someone silently attaching your eBay account to theirs.

Leaderboard (optional)

The community leaderboard is off unless you turn it on. If you do, we store a pseudonymous handle you pick — something like "SwiftLister42" — together with counts of listings published and SKUs created. Your real name, email and the contents of your listings are not shown on the leaderboard. You can leave it in Settings.

Usage and diagnostics

Google Analytics for Firebase runs inside the web app and records events such as screen views. It sets Google Analytics cookies and identifiers in your browser.
Aggregate service statistics — counts and cost of AI and eBay API calls, kept so we can monitor what the service costs to run.
Server logs from Google Cloud, which include IP addresses and request metadata and are retained by Google on their standard schedule.

These marketing pages set no cookies at all, and carry no analytics, no trackers and no third-party scripts. The only JavaScript on them is a few lines served from this site to run the tabs, the FAQ accordion and the time-saved slider; it sends nothing anywhere. Tracking only begins if you open the app.

Payment information

If you subscribe, payment is processed by Stripe. Your card number goes to Stripe directly and never touches our servers — what we store is your Stripe customer identifier, your subscription's plan and status, and its renewal date, which is what the app reads to know your account is active.

2. How we use it

To run the service — generating listings from your photos and publishing them to eBay on your instruction.
To keep your settings, presets and drafts available between sessions.
To secure accounts, prevent abuse, and enforce our terms.
To understand which features are used and what the service costs to operate.
To reply when you contact us.

We do not sell your personal information, and we do not use your data for advertising.

3. Who else receives your data

Recipient	What they receive	Why
Google Cloud / Firebase	Everything stored by the service: account records, photos, listing data, logs. Hosted in the United States (us-central1).	Authentication, database, file storage, server functions and hosting.
Google Gemini API	The photos for the item being generated, plus any notes you typed for it.	To identify the item and draft the title, description, category, condition, item specifics and suggested price.
Stripe	Your email address and the payment details you enter on Stripe's checkout page — if you subscribe.	To process subscription payments and manage billing. Card numbers are held by Stripe, never by us.
eBay	Your listing content, your photos, your ship-from address and your package details — when you publish or update a listing.	To create and maintain listings on your own eBay seller account. Photos you publish are uploaded to eBay's media service and hosted by eBay.

Once data reaches eBay it is governed by eBay's own privacy policy and your seller agreement with them. We may also disclose information where the law requires it.

4. AI processing, stated plainly

Generating a listing means sending your item photos to Google's Gemini API. Do not upload photos containing anything you would not want processed by a third-party AI service — documents, personal correspondence, other people, or anything visible in the background you would rather keep private. Crop before you upload if in doubt.

5. Security

All traffic is served over HTTPS with strict transport security.
eBay OAuth tokens are encrypted before storage and are only ever decrypted server-side.
Database and storage rules restrict your photos and listings to your own account.
Privileged fields such as administrator status cannot be set from the client.

No system is perfectly secure, and this is beta software. Please do not store anything in it that you could not afford to lose or have exposed.

6. Retention

We keep your account data, photos and listings for as long as your account exists, because the service is not useful without them. Deleting a listing in the app removes it and its photos from our storage. Aggregate, non-identifying service statistics and security event records are kept longer.

Deleting a listing in ListChute does not end a live eBay listing, and it does not remove photos already uploaded to eBay. Those are managed in your eBay account.

7. Your choices

Disconnect eBay. Settings has a disconnect option that removes our stored tokens. You can also revoke access from your eBay account settings at any time.
Leave the leaderboard. Opt out in Settings.
Correct your information. Account and seller settings are editable in the app.
Delete your account. There is no self-service delete button yet. Email glitchfixdesigns@gmail.com from your registered address and we will delete your account, photos and listings.
Request a copy of your data. Same address. Depending on where you live you may have additional rights to access, correct, port or erase your data, and to object to processing; we will honour those requests regardless of where you live.

8. Children

ListChute is not intended for anyone under 18. eBay requires sellers to be 18 or older, and so do we. We do not knowingly collect information from children.

9. International users

The service is operated from and hosted in the United States, and eBay US is the only supported marketplace. If you use it from elsewhere, your data is transferred to and processed in the United States.

10. Changes

We will update this page when the service changes and revise the date at the top. If a change materially affects how your data is handled, we will tell you in the app.

11. Contact

Questions, deletion requests, or anything else: glitchfixdesigns@gmail.com.