Privacy

About this notice

This notice describes the information AuctionDex uses to operate the site and send reminders you request. Contact information for questions about your data appears below.

What the current build collects

As implemented today, AuctionDex:

• has no accounts, no sign-in and no user profiles;
• asks for an email address only when you choose to request an auction reminder; no account is required;
• keeps your filter choices in the page URL only — they are not stored on a server;
• runs no advertising and no ad-retargeting scripts;
• does use Google Analytics, which sets cookies in your browser — described in the next section.

Analytics

AuctionDex uses Google Analytics 4 to understand which pages and collections people actually use. It records page views and the technical details a browser sends with any request — page URL, referring page, device, browser, operating system and language — together with an approximate location derived from your IP address and a randomly generated identifier stored in a cookie.

That cookie is what makes repeat visits recognisable as the same browser. We do not link the analytics identifier to reminder email addresses or an account. Google processes this data on our behalf and its own terms apply to it.

You can refuse or delete these cookies in your browser settings, use private browsing, or install Google’s opt-out browser add-on. Blocking analytics does not restrict any part of the site — every page and every listing works exactly the same.

Optional email reminders

You can request one email about a selected auction. We first send a verification email; the reminder is eligible to send only after that request is confirmed. Each request is separate consent for that auction, not a newsletter subscription. Reminder emails include links to cancel the reminder or unsubscribe from all future AuctionDex reminders.

For these requests, AuctionDex stores:

• the recipient’s email address, encrypted in the reminder record; the application removes it when it processes the reminder as sent, cancelled, expired, failed or otherwise finished;
• a one-way keyed hash of your address, so that cancelling, unsubscribing and the per-address limits work without keeping the address itself;
• the auction’s title, link, end time and captured price, the chosen timing and any price limit or time zone, request and confirmation times, consent wording version, delivery status and the provider’s message identifier.

The reminder record does not store an IP address. Request-limit counters use keyed hashes; cleanup removes counters older than a day.

The software’s cleanup rules are:

• an unconfirmed request expires after 24 hours; its address is erased when expiry is processed;
• a finished reminder’s record, already without the address, becomes eligible for deletion 30 days after it finishes;
• unsubscribe links expire after 365 days, and their expired records are removed during cleanup;
• an unsubscribe, recorded bounce or spam report adds the address’s keyed hash to a do-not-email list to block future reminders; that list has no automatic expiry.

Expiry and deletion are applied when reminder processing or cleanup runs. Automatic cleanup runs with the minute reminder check and through a separate hourly cleanup job.

Cloudflare is the email provider. It receives the recipient address and message content to deliver verification and reminder emails. Supabase hosts the encrypted address and reminder records in a separate storage area for AuctionDex. The cleanup rules above describe AuctionDex’s reminder records, not these providers’ own operational logs or backups.

If the mail service doesn’t confirm that a reminder was handed over, it is not resent automatically. In that rare case you may miss that reminder, but you will not get it twice.

Marketplace data and eBay account deletion

AuctionDex retrieves public marketplace listing information — titles, prices, bid counts, end times and listing photos published by sellers. It does not require visitors to connect an eBay account, and there is currently no way to do so.

eBay requires every application using its APIs to expose an endpoint that receives marketplace account deletion notifications. AuctionDex operates such an endpoint for compliance. Because the site holds no eBay marketplace-user account data, a notification is acknowledged and no stored personal data exists to erase.

AuctionDex does not currently retain eBay marketplace-user account data — no eBay user IDs, usernames, seller identifiers, linked accounts or user OAuth tokens. If account-linked features are introduced later, deletion requests will remove the applicable stored account-linked data, and this page will be updated to describe exactly what is held.

Server logs

Any web host records basic request information such as IP address, timestamp and user agent as a normal part of serving traffic.

AuctionDex is hosted on Vercel, which handles request logging as part of serving the site. Vercel’s own privacy terms govern that data.

Leaving the site

Auction cards link to third-party marketplaces. Once you follow a link you are on that marketplace’s site, subject to its privacy policy — not this one. Outbound links may carry affiliate tracking parameters that identify AuctionDex as the referrer; see the affiliate disclosure.

Listing images are loaded directly from the marketplace, which means the marketplace can see that your browser requested those images.

Contact

See the contact page.

For reminder support, privacy questions or requests to access or delete your reminder information, email alerts@auctiondex.io. Unsubscribing keeps only a keyed hash on the do-not-email list so we can honor your choice.