Privacy policy

Fireball Dispenser is a personal service for collecting, filtering, and exporting feedback received on your eBay sales.

Information used

The service requests eBay's commerce.feedback permission and read-only account identity access. The feedback permission can authorize feedback changes, but this service only reads feedback and implements no feedback submission or reply operations. It uses the connected account's username and stable identifier to confirm the connection and process deletion notices. For business accounts, eBay's default identity response may include business information; the service discards fields it does not need.

Stored feedback contains an eBay feedback ID, comment, rating, date, item title, and synchronization timestamps. Buyer identifiers are transformed into keyed hashes used for deletion matching. The service does not store complete raw eBay responses or publish feedback on its public pages.

Storage and access

Feedback, phrase filters, and connection information are stored in this Site's hosted database. Each workspace is linked to the verified eBay account used at sign-in. The server uses a random, seven-day session cookie to authorize access to that account's feedback and filters; only a hash of the session token is stored in the database. OAuth tokens are encrypted before database storage. Failed or incomplete sign-in attempts expire after ten minutes. A keyed hash of the client address is used temporarily to limit repeated sign-in attempts, without retaining the raw address in the application database. eBay credentials and encryption keys are held in the Site's server-side secret configuration.

Filters and exports

Phrase rules hide matching entries from the list and exports while preserving the stored original. JSON, CSV, text, and Markdown files are generated on request. The service does not retain a separate copy of generated export files. Files downloaded to your device remain under your control.

Deletion and retention

Stored feedback is retained until the owner disconnects and erases it or a verified eBay account-deletion notice requires its removal. A verified notice deletes matching feedback; when the connected account is affected, its stored feedback, filters, and tokens are removed. Keyed identifier hashes remain to prevent deleted records from being reimported, along with a hashed notification ID and processing time. These matching hashes are not shown in exports.

Provider backups and operational logs may follow the hosting provider's retention schedule. Deletion from the active application database does not immediately erase those provider-managed copies. Copies you downloaded previously are not remotely removed from your device.

Authentication and hosting

eBay handles your eBay sign-in and consent. This service never asks for your eBay password. There is no separate ChatGPT sign-in. Signing out revokes the current service session. Disconnecting and erasing the account or processing its deletion revokes all of its service sessions. OpenAI and its hosting providers process the requests, storage, and operational information needed to deliver the service. No advertising or analytics scripts have been added.

Your controls

You can change filters, export a list, or disconnect and erase stored feedback from the workspace. You can separately revoke the app's permission in eBay account settings. The service does not sell feedback data. Each eBay account has its own private workspace.

Questions

Contact the project owner through the channel where they provided this application. eBay's own handling of account data is governed by its privacy policy.