Privacy Policy

What we collect

We collect what the service needs to work, how signed-in people use the site and bot, and how often our pages are opened:

• Account details. If you sign up with an email address: the address and your password, which we store only as a secure hash (we can't read it). If you use Discord: your Discord user ID and username. We don't ask Discord for your email, servers or messages, so you may add an email address yourself to get email alerts, which we then keep.
• Your alerts. Each alert's name, keywords, marketplace, category, price limits, filters and notification settings, and when it was last checked. If you share an alert, the link itself holds its name, search and filters, for whoever you send it to. We don't keep a copy, it leaves out your excluded sellers and anything that says who you are, and nothing connects someone who opens it to you.
• Your settings. If you set them: the eBay sellers you've blocked, and your quiet hours and time zone.
• Listings we sent you. A record of each eBay listing an alert found (its title, price, condition and link), so the same listing isn't sent twice, and when we emailed it to you if you turned on email alerts.
• Purchases through your links. From November 1, 2026, each eBay link we show you carries a random ID that stands for your account, and a word for where we showed it (such as a Discord thread or a browser notification). When eBay reports a purchase through one of those links, we record it against your account: the item, price, quantity, our commission, the eBay site, its status (such as returned), where the link was shown and when it was made. eBay counts whatever is bought within its time window after someone clicks the link, so this can include something you didn't find through us, or a purchase by someone you shared a link with. It isn't everything you buy on eBay. You can turn it off in Account settings.
• How you use the site and bot. From November 1, 2026, while you're signed in: which of our pages you open and about how long you're active on each, which features you use and when (such as creating an alert, running a preview, or opening a listing's link to eBay), and your browser and system (such as Chrome on Windows). In Discord, which of our bot's commands and buttons you use and when. It doesn't include what you search for or type, which listings or sellers you looked at, or your IP address, and it adds no cookies. We don't record what your browser does if it sends Global Privacy Control, which can't reach Discord, and you can turn all of it off in Account settings.
• How often our pages are opened. From November 1, 2026: for each public page of this site (such as the home page or a guide), how many times it was opened each day, and how many of those came from outside the site. From November 1, 2026, we also count, for each visit: the website that linked to us, by its name only (such as google.com), or the tag in the link (such as ?ref=reddit); the kind of device and browser (such as a phone with Safari); the country Cloudflare says it came from; the hour it began; how many of our pages it opened; which page came next; and roughly how long each page was on screen. We only keep totals for each day, such as how many visits came from google.com to a guide, or how many were on phones, so they can't be put back together into one visit. None of it has a cookie, anything that says who you are, or your IP address. We don't count a browser that sends Global Privacy Control.
• Email alerts. If you turn them on: when you did, and a random code for the unsubscribe link in those emails. The code can only turn the emails off.
• Browser notifications. If you turn them on: the address your browser's push service gave it, the keys that encrypt what we send to that address, which browser and system it is (such as Chrome on Windows), and when you turned them on.
• Sign-in sessions. When you sign in, a random token is stored in a cookie on your device and a scrambled copy (a hash) on our server, with when it started and when it ends. For your account, we also keep when you last used the site while signed in, to within 15 minutes: only the latest time, which your next visit replaces, so we can tell which accounts are in use and help you when you ask.
• Two-factor sign-in. If you turn it on: the secret your authenticator app shares with us, which we store encrypted, and scrambled copies (hashes) of your recovery codes.
• How you found us. If you accepted the optional cookie, when you create an account: the website or tagged link that first brought you here (for example google.com, or a link marked as from Reddit) and the first page you saw. It shows us which links and sites bring people in. It never includes the address of the page you came from, only its site. If you answer "How did you find us?" on your dashboard, we keep your answer with it. That question is optional.
• Links we email you. For confirming an email address or resetting a password: a single-use link, stored as a hash, that expires within a day. A sign-up's link also keeps the alert you were making, and how you found us if you accepted the optional cookie, so they're there even if the link opens in another browser.
• How our pages load. Cloudflare, which delivers this website, adds a small script to every page (Cloudflare Web Analytics). It reports which page you opened and the page you came from, each without anything after a ? or #, how quickly the page loaded and responded, and your browser, system and type of device. Cloudflare works out your country from your IP address. We only see totals, such as how many times each page was opened and how fast it loaded in each country, not your visit on its own. It sets no cookie, stores nothing in your browser, and runs whether or not your browser sends Global Privacy Control.
• Technical logs. Our servers record errors and events, such as an alert that couldn't be checked or a message Discord refused. These can include your user ID, Discord username or an alert's name.

Your IP address is used briefly, in memory, to stop repeated sign-in attempts and sign-up abuse; we don't store it in our database. Apart from Cloudflare Web Analytics, we don't use third-party analytics, and we don't use any advertising trackers or social media pixels.

How we use it

• To run your alerts: search eBay with your keywords and filters, and send new listings to you.
• To sign you in, keep your account secure, and send the emails you ask for (confirming an address, resetting a password, or telling you your password, sign-in email or two-factor sign-in changed, that someone is getting its code wrong, or that your email alerts are on), and, once, if a day after you make an alert nothing is set up to send you what it finds. We don't send marketing email.
• If you turn on email alerts, to email you the new listings your alerts find. They're off unless you turn them on, they have no tracking pixels, and every one has an unsubscribe link.
• If you turn on browser notifications, to show you the new listings your alerts find. They're off unless you turn them on, and links in them are affiliate links like the others we show you.
• To see how much is bought through each person's links, so we can understand which alerts and links earn the commission that pays for the service. Only our administrators see it, and we don't use it to target you or decide what you're offered.
• To see how each person uses the site and bot, so we can find what's useful, what's confusing and what to build next. This also looks at how your alerts are set up and how many listings each one sent. Only our administrators see it, and we don't use it for advertising or to decide what you're offered.
• To see which of our pages people find, where they come from, how they move between pages, and how many go on to sign up.
• To see how quickly our pages load, and which ones are opened, so we can keep the site fast.
• To keep the service working and fair: spotting errors, stopping abuse, and sharing eBay's daily search limit fairly between users.

We don't sell your information, and we don't use it for advertising.

Discord

Once you've connected Discord and joined the Snipe Finder Discord server, our bot creates a private channel for you there, with a thread for each alert, and posts listings in it. Only you, the bot and the server's administrators can see it. Server administrators also see a private channel of listings each alert's filters left out, which names the alert and your Discord account, so they can help when an alert misbehaves.

When you first sign up with Discord or connect it to your account, Discord asks whether Snipe Finder may add you to servers, and if you agree, our bot adds you to the Snipe Finder server, and only that one. We use that permission once, then, and never again: if you leave the server, signing in doesn't put you back.

If you're in the server, the bot also gives you a role named after your tier, such as Free tier, which everyone in the server can see. The bot takes it off if you disconnect Discord or delete your account.

Two more private channels, which only the bot and our administrators can see, note each new account and each sign-in: the account's Discord name and email address, how it signed up or in, and when. They help us spot problems and misuse. They never include your password or IP address.

The bot only reads the slash commands you send it, not your messages. Discord's own handling of your information is covered by Discord's privacy policy.

Who else sees your information

We share information only with the services that run Snipe Finder, and only what each one needs:

• Discord: to sign you in, to post your alerts' listings in the server, to show your tier as a role there, and to tell our administrators about new accounts and sign-ins in their private channels.
• eBay: we send eBay your alerts' keywords and filters to search for listings, but not who you are. Listing photos, on our pages and in browser notifications that show one, load from eBay's image servers, which see your IP address. From November 1, 2026, the links you open from us also carry the random ID described above. We don't tell eBay your name or contact details, but if you buy something, eBay can connect the ID with your own eBay account.
• Your browser's push service (Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge): delivers browser notifications. It sees your browser's address with it and when we send one. What the notification says is encrypted for your browser, so the service can't read it.
• Resend: delivers our emails, so it receives your email address and the message, which for an email alert includes your alert's name and the listings it found.
• Cloudflare: delivers this website, so every request to it passes through Cloudflare with your IP address. It also measures how our pages load for us (Cloudflare Web Analytics, described above).
• Cloudflare Turnstile: after several failed sign-in attempts, or when unusually many accounts are being made, we may ask you to complete a check that you're not a bot. Cloudflare then receives your IP address and information about your browser.
• The companies that host our servers and database, which store information for us.
• Our administrators, who can see accounts, alerts, purchases through your links, how you use the site and bot and logs to run and support the service.

We may also disclose information if the law requires it, or to protect the service and its users from fraud or abuse.

eBay affiliate links

Links to eBay are affiliate links through the eBay Partner Network (see our affiliate disclosure). When you open one, eBay sets its own cookies so it can credit us if you buy something. eBay then tells us about the purchase (such as the item, price and time) so it can pay us a commission. From November 1, 2026, it also gives us the random ID in the link, which is how we match the purchase to your account. It doesn't tell us your name, eBay username, address or payment details. What eBay does with your information is covered by eBay's privacy policy.

Cookies and local storage

We use only these, and no advertising trackers. All but the last are needed for the site to work:

• Session cookie: keeps you signed in. It lasts 30 days from your last visit, or until you sign out.
• Discord sign-in cookie: checks that a Discord sign-in was started on this site. It lasts 10 minutes.
• Two-factor sign-in cookie: if you've turned on two-factor sign-in, remembers that your password or Discord sign-in was right while you enter your code. It lasts 10 minutes.
• Where you came from (optional): only if you accept it in the cookie banner, notes the website or tagged link that brought you here (for example google.com) and the first page you saw, for up to 30 days, so an account you create records it. It isn't set once you're signed in, or if your browser sends Global Privacy Control, and is never shared.
• Your cookie choice: remembers whether you accepted or declined the optional cookie, for a year. Change it any time with Cookie settings at the bottom of any page.

If you turn on browser notifications, your browser keeps a small script from this site, which shows them and does nothing else, and the details it needs to get them, until you turn them off or sign out.

When you make an alert before you have an account, your browser's local storage keeps what you've entered for up to a day, so it's ready once you've signed in. It stays in your browser unless you sign up by email, as above. The alert form keeps there whether you last used Simple or Advanced, so it opens the same way next time, and the dashboard keeps there that you've closed its tutorial, or said not now to adding the site to your home screen, and the site that you've closed a notice at the top of the page, so they don't come back. The site follows your device's light or dark setting, and stores nothing for it.

Cloudflare may set its own cookie when it shows the sign-in check, and eBay sets its own when you visit eBay. Cloudflare Web Analytics sets none, and stores nothing in your browser.

How long we keep it

• Your account and alerts: until you delete them, or we close the account.
• Listings we sent you: the title, link and condition for 3 days, or until they go out if they're still waiting. After that, only eBay's item number and the price, so the same listing isn't sent twice, for 60 days. We keep how many listings each alert sent or left out each day, with nothing about the listings, until you delete the alert or your account.
• Purchases through your links: 13 months from the purchase, or until you turn this off or delete your account.
• How you use the site and bot: 90 days, or until you turn this off or delete your account. We keep daily totals for everyone together, which don't say who did what, after that.
• How often our pages are opened, and the daily totals about visits: we keep these numbers, as they don't say anything about anyone.
• How our pages load: Cloudflare keeps these measurements, and we can see the totals for six months.
• Technical logs: 14 days in our database and 30 days in log files. Warnings and errors are also posted to a private administrators' channel in Discord, where they stay until we delete them.
• Sign-in sessions: until they end (30 days without a visit) or you sign out. When you last used the site: until your next visit replaces it, or you delete your account. Emailed links: until used or expired, at most a day.
• Two-factor sign-in: until you turn it off or delete your account. A setup you don't finish is deleted when the next one is started.
• Your private Discord channel and the listings posted in it: until you delete your account or disconnect Discord. If the server runs short of room, it can go 30 days after you leave the server or stop having any alerts. Your alerts are kept, and they get new threads when you come back.
• A browser's notification details: until you turn them off, sign out of that browser, or its push service tells us they're no longer in use.
• A record of actions our administrators take on accounts, kept for security.
• Notes of new accounts and sign-ins in the administrators' Discord channels: until we delete them.

Your choices and rights

• See and change your information: your alerts are on your dashboard, and Account settings lets you change your email or password, turn two-factor sign-in on or off, and connect or disconnect Discord.
• Stop email alerts: use the unsubscribe link in any of them, or turn them off in Account settings.
• Stop browser notifications: turn them off in Account settings or in your browser's site settings, or sign out of that browser.
• Stop recording your purchases: turn purchase tracking off in Account settings. We delete what's recorded and stop putting your ID in links, and links you already have stop counting.
• Stop recording how you use the site and bot: turn activity recording off in Account settings. We delete what's recorded.
• Delete your account: in Account settings. This deletes your alerts, the listings sent for them, purchases recorded through your links, how you've used the site and bot, your sessions and your Discord channels and threads straight away. Logs that mention you are deleted on the schedule above. Messages already posted in the administrators' Discord channels stay until we delete them; ask us and we will. Leaving the Discord server is up to you.
• Get a copy: Download my data in Account settings gives you your account's details and settings and your alerts as a file at once. For anything else we keep, or to ask anything else, email [email protected]. We'll answer within 30 days.

Depending on where you live, you may have more rights, such as objecting to how we use your information or complaining to your data protection authority. Write to us and we'll help.

Legal bases (UK and EU)

We use your information to provide the service you signed up for (performing our contract with you), and to keep it secure and working, such as stopping abuse and fixing errors (our legitimate interests). Email alerts and browser notifications rely on your consent, which you can withdraw at any time by turning them off. Measuring how our pages load, through Cloudflare Web Analytics, relies on our legitimate interests in keeping the site fast, and we only see totals. Recording purchases through your links relies on our legitimate interests in understanding what earns the commission that pays for the service, and you can object at any time by turning it off in Account settings. Recording how you use the site and bot relies on our legitimate interests in improving them, and you can object at any time by turning it off in Account settings. Counting how often our pages are opened, and the daily totals about visits, relies on our legitimate interests in understanding which pages are useful and how people find them, and holds nothing about you.

Security

The site is served over an encrypted connection. Passwords, session tokens, emailed links and recovery codes are stored only as hashes, two-factor secrets are encrypted, sign-in attempts are rate-limited, and the bot's channels are private. No service is perfectly secure, so use a password you don't use anywhere else. You can also turn on two-factor sign-in in Account settings.

Where your information is processed

Discord, eBay, Resend, Cloudflare and the push services above are based in the United States, and they and our hosting providers may process information in the United States and other countries.

Age

Snipe Finder is for people aged 18 and over (see the Terms of Service). We don't knowingly collect information from anyone younger; if you think we have, email [email protected] and we'll delete it.

Changes to this policy

When we change this policy we'll update the date at the top, and for significant changes we'll say so on the site before they take effect.

Contact

Questions or requests about your information: [email protected].