Privacy policy
GhostFlip is a tool that helps eBay sellers run their store. This page says what it stores, why, and how to get it removed. Last updated November 9, 2026.
Who runs it
GhostFlip is operated by the operator of this service. A contact address will be posted here before the service opens to customers.
What we store
- Your account. Your email address, a one-way hash of your password (never the password itself), when you log in, and which stores you belong to.
- Your eBay connection. When you connect your eBay account we receive access tokens from eBay. They are stored encrypted and used only to read your listings and orders and, when you turn those features on, to list, reprice and upload tracking on your behalf. We also store your eBay username so we can tell your store's data apart from everyone else's.
- Your listings and orders. Item ids, titles, prices, quantities, sale totals, and for each order the buyer's name and shipping address exactly as eBay provides it, so the item can be sent to them. Buyer names, addresses and phone numbers are stored encrypted and erased 30 days after the order ships or is cancelled; the rest of the order (ids, amounts, dates) stays for your sales reports.
- Supplier facts. When you use the browser extension, it reads product pages you open (price, stock, shipping, reviews) and sends those facts to your store's account. It never sends your supplier login, payment details or any page outside the supplier site. The extension does not place orders; you click the final button yourself.
- Decisions and activity. A log of what the tool decided or did for your store (price changes, stock checks, holds), so you can audit it.
What we do not do
- We do not sell, rent or share your data with advertisers or data brokers.
- We do not read or store your supplier passwords or payment cards. The extension only works on pages you have opened yourself.
- Each store's data is kept apart. Nobody at another store can see yours.
- We only call eBay on your behalf with the permissions you granted when you connected, and you can withdraw them at any time.
Where it lives and how it is protected
Data is stored in a database on our hosting provider's servers in the United States, reached only over HTTPS. eBay tokens and buyers' names and addresses are encrypted at rest. Passwords are hashed. Access to the servers is limited to the people who run the service.
Cookies
One signed cookie keeps you logged in. There are no advertising or tracking cookies.
Removing your data
- Disconnect eBay from Settings at any time. Your eBay tokens are wiped immediately.
- Close your account by writing to the contact address above. We delete your account, stores, listings, orders and logs within 30 days, except records we must keep for tax or legal reasons.
- If you delete your eBay account, eBay notifies us and we erase the data tied to that eBay user automatically, without you having to ask.
Changes
If this policy changes in a way that matters, we will say so on this page and by email to account holders before the change takes effect.