Privacy Policy

• Account info — your email address when you sign up.
• eBay connection — if you connect your eBay account via Flipsheet, we store your eBay username and OAuth tokens. Tokens are encrypted at rest and never exposed to other users.
• Collection data — cards you add to your collection, pull logs from Ripsheet, and listing drafts from Flipsheet.
• Usage data — standard server logs (page requests, error traces). No third-party analytics trackers.

Your data is used solely to operate and improve Crackwise. We use your email to send account-related communications (password resets, important service notices). We use your eBay tokens only to perform actions you explicitly initiate — creating listings, fetching policies — on your behalf.

We do not sell your data. We do not share it with third parties except as required to operate the service (e.g., our database host, Supabase).

Your data is stored in Supabase, hosted on AWS infrastructure in the United States. eBay OAuth tokens are encrypted using AES-256-GCM before being written to the database.

You can request deletion of your account and all associated data at any time by emailing chrisstie@gmail.com. We'll process requests within 30 days.

You can disconnect your eBay account at any time from within Flipsheet, which will delete your stored tokens.

Privacy questions? Email chrisstie@gmail.com.