Privacy policy

1. Scope and controller

The Vemew owner-operator (“Vemew,” “we,” or “us”) operates TCG Tools and is the controller for the personal information described here. This policy covers the current eBay account-connection feature in TCG Tools, including Sandbox testing and any later owner-approved Production connection.

Questions, privacy requests, or complaints may be sent to [email protected].

2. Information we handle

When you pair the app with the secure service or connect an eBay account, TCG Tools may handle:

• the selected environment (Sandbox or Production), an internal installation/session identifier, connection state, and related creation, verification, expiry, revocation, and deletion timestamps;
• a pseudonymous, one-way representation of the eBay account identifier used to prevent accidental account replacement and match deletion notices;
• eBay OAuth access and refresh credentials, stored only by the service in encrypted form, plus short-lived authorization and pairing state;
• minimal security and reliability information, such as aggregate status, failed-operation categories, and deletion-processing state; and
• for an eBay marketplace-account-deletion notice, a one-way notice reference and the times it was accepted and completed.

TCG Tools does not ask for or receive your eBay password or MFA code. The current connection-only feature does not collect eBay listings, orders, buyers, messages, payment details, advertising identifiers, or push-notification tokens. Listing, order, sale-synchronization, and automation features are not enabled and would require this policy to be reviewed and updated before use.

3. Information that stays on your device

Your local card collection, collection history, scans, and catalog data are separate from the eBay connection service and are not sent to eBay or Cloudflare by this connection feature. The Android app stores limited connection metadata locally and protects installation-session credentials with Android Keystore encryption.

4. Why we use information

We use the information above only to pair your installation, obtain and refresh the eBay authorization you request, verify that the connected account remains the intended account, show connection status, disconnect or revoke access, protect the service, diagnose failures without exposing credentials, and honor eBay marketplace-account-deletion notices.

Where applicable, processing is based on your request to provide the connection, your consent to eBay authorization, compliance with privacy and platform obligations, and our legitimate interests in securing and operating the service. You may withdraw authorization by disconnecting TCG Tools or removing its access through eBay.

5. Service providers and sharing

We do not sell personal information, use it for advertising, or share it with data brokers.

• eBay provides account authorization, identity verification, token revocation, and marketplace-account-deletion notifications. Your use of eBay is also governed by the eBay User Privacy Notice and eBay User Agreement.
• Cloudflare hosts the connection service and this website. Cloudflare may process network and security metadata, such as IP address, request timing, and HTTP details, to deliver and protect those services. See the Cloudflare Privacy Policy.

We may also disclose information when reasonably necessary to comply with law, protect rights or service security, or respond to a valid legal request.

6. Security and international processing

The service uses HTTPS, restricted access, environment-separated storage, encrypted credentials, short-lived sessions, replay protections, and deletion keys designed to make retired encrypted state unreadable. No system can guarantee absolute security.

eBay and Cloudflare operate internationally, so information may be processed outside your state, province, or country under the safeguards and terms offered by those providers.

7. Retention, disconnect, and deletion

• OAuth credentials are retained only while needed for an authorized connection. Disconnecting removes the locally usable provider credentials and attempts revocation with eBay.
• Limited pseudonymous linkage and connection-history metadata may remain after disconnect to preserve an accurate status history and prevent silent replacement by a different account.
• A valid eBay account-deletion notice places a matching connection into deletion processing, removes its credentials and linkage, and retires the related encryption keys.
• A minimal non-reversible deletion receipt is retained for up to 90 days to demonstrate completion and prevent duplicate processing, then removed.
• Short-lived pairing, authorization, and installation-session records expire automatically. Provider infrastructure may retain limited security records under its own documented retention practices.

Disconnecting eBay does not delete your on-device card collection or history. To request deletion of remaining connection metadata, contact [email protected].

8. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability; to withdraw consent; and to complain to a privacy regulator. We may need to verify a request before acting. Contact [email protected] to exercise an applicable right.

You can also revoke TCG Tools through eBay’s third-party application access settings. Revoking access at eBay prevents further authorized eBay API access but does not delete the separate card collection stored on your device.

9. This website

Vemew’s static website does not set advertising cookies, run analytics scripts, or require an account. Cloudflare still processes ordinary network and security information needed to deliver and protect the site.

10. Changes to this policy

We will post material changes here with a new effective date. TCG Tools will require review of a new policy version before a Production eBay connection can proceed. Features that collect new categories of eBay data will not be enabled until the policy accurately describes them.