LotLemon ("we", "us") helps collectors find underpriced Pokémon card lots on eBay. This policy explains what we collect, why, and the choices you have. We keep it short and plain because the data we handle is limited on purpose.
The short version. We store your email and a secured password so you can log in. When you value a listing, we process the listing's photos to identify and price the cards. We do not sell your data, and we do not track your browsing across the web.
Information we collect
Account information
When you create an account we store your email address and a hashed password. Passwords are never stored in plain text; they are salted and hashed with PBKDF2 before they touch our database, so we cannot read them.
Listing data you submit
When you value a lot, either through the website or the browser extension, we receive the photo URLs and basic details of that eBay listing (its title, asking price, and shipping cost). We download the listing photos and run computer vision on them to identify and price each card. We may retain the processed card images to improve our identification models. These images are of trading cards, not of you.
The browser extension
The LotLemon browser extension activates only on eBay listing pages. On those pages it reads the listing's gallery image URLs and price from the page so it can send them to our server for valuation. It does not read your browsing history, your other tabs, your eBay account, or any page that is not an eBay listing. It stores your settings locally in your browser.
Cookies
We use a single session cookie to keep you logged in. It is set HttpOnly and Secure, is not readable by JavaScript, and is not used for advertising or cross-site tracking. We do not use third-party advertising cookies.
How we use your information
- To operate your account and keep you signed in.
- To identify and price the cards in the lots you ask us to value.
- To send you the alerts and account emails you sign up for.
- To improve the accuracy of our card identification and valuation.
Service providers we rely on
To value cards we send listing images and card text to a small number of providers acting on our behalf: an AI vision provider (for reading card text), and card pricing data providers (for current market prices). We share only what is needed to complete the valuation, never your account credentials. We use eBay's public listing data as the source of the lots we scan.
eBay account deletion
We honor eBay's Marketplace Account Deletion notifications. If eBay tells us a user has closed their account, we remove any associated listing data we hold for that user.
Data retention
We keep your account information for as long as your account is open. Processed card images may be retained to improve our models. You can ask us to delete your account and associated data at any time by emailing us.
Your choices
- Access or correct your account information by contacting us.
- Delete your account and associated data by contacting us.
- Unsubscribe from alert emails using the link in any email.
- Remove the browser extension at any time from your browser's extensions page.
Security
Traffic to LotLemon is encrypted with HTTPS. Passwords are salted and hashed. Session tokens are random and stored only as hashes. No system is perfectly secure, but we keep the data we hold minimal so there is little to expose.
Children
LotLemon is not directed to children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above and, for material changes, notify account holders by email.
Contact
Questions or requests? Email support@lotlemon.com.