Privacy policy

What this policy covers

This single policy applies to both the roverextension.com marketing website and the Rover for eBay Chrome extension. Each section below names which surface it applies to so you can see exactly what is collected where.

Marketing website (roverextension.com)

We use PostHog to capture anonymous product analytics. Specifically: which pages you viewed, click and scroll interactions on the page, basic technical info like browser type, country, and language, and a crash report if the site errors. We do not record your session, we do not capture keystrokes or form-field contents, we do not detect dead-clicks or rage-clicks, and we do not set advertising cookies. If you use the contact form, we receive the name, email address, and message you choose to send so we can reply. We do not sell data and we do not build a profile you can be identified from.

Chrome extension (Rover for eBay)

The extension runs inside your browser. Most of what it does — fetching your watchlist and listings from eBay, applying tags, opening listings — happens locally and stays on the device. Where data does leave the browser, it goes to one of three places: PostHog (the anonymous analytics events listed below), eBay (when you click through to a listing, and when Rover calls eBay's API on your behalf), or Rover's own backend. The backend does three jobs: it holds your eBay sign-in session, it syncs your tags across devices, and it delivers push notifications. Exactly what each stores is spelled out below — including which parts are tied directly to your eBay account (your sign-in and alerts) and which are only pseudonymous (your tags).

What we capture for analytics

• An anonymous device ID, your chosen marketplace, and a single "signed in: yes/no" flag — never your eBay username or email
• Which screens you use — side panel opened, tab switches, and how many items each section holds (counts only)
• Searches you submit — only the length of the query and which path you used (typed, suggestion, recent), never the search terms
• Outbound clicks to eBay — the surface you clicked from and the link type (item, seller, search, page), never the URL
• Tag activity — tags created, assigned, removed, deleted, and drag-and-drop saves, as counts and outcomes; never tag names or the items they're on
• Watchlist, Buying, and Selling inventory counts — how many active, ended, sold, or unsold items loaded, and whether the load succeeded; never item IDs, titles, or prices
• Push notifications — alerts turned on or off, and each notification's delivery, click, and dismissal with its type and the time to click
• Sign-in funnel steps — sign-in started, completed, cancelled, or failed, and sign-out
• Settings and in-app prompts — marketplace switch, open-in-new-tab preference, analytics toggle, force-refresh and clear-cache, whether a creator campaign ID is set (never the ID), watchlist exports (method and count), and the affiliate-disclosure, review, and tip prompts being shown or dismissed
• Install, update, and uninstall — install and update fire from the extension; the uninstall event is captured by the roverextension.com/uninstalled page when Chrome opens it after removal
• Crash reports if the extension errors — the error type, message, and stack trace, with any web URLs stripped out before sending

What Rover's backend stores

• When you sign in with eBay: a one-way hash of your eBay username (never your username in clear text, and never your email), the eBay access and refresh tokens issued by eBay's sign-in, and the permissions you granted. This lets Rover fetch your watchlist, purchases, and listings on your behalf without making you sign in over and over. It is deleted when you sign out or revoke access, and eBay can also trigger its deletion through its account-closure process.
• If you turn on alerts: your eBay username (used to match eBay's notification webhooks to your install) and a push delivery token. Removed when you turn alerts off or sign out.
• Your tags — names, colours, and which items they're attached to — stored under a pseudonymous token derived from your eBay account with a server-side secret, so the same tags follow you across devices. The token is not your username, it is never shared with anyone, and we don't use it for anything but tag sync. You can wipe it, and the tags, from Settings → Privacy & data.

How long we keep it

eBay sign-in sessions (the refresh tokens) are removed when the token expires or after 180 days without use. Push-notification registrations are removed when the browser reports them expired, or together with the session. Tags are removed after 365 days without a sync. And everything can be deleted from Settings → Privacy & data at any time.

What we never do

• No session recording or screen capture
• No keystroke capture
• No form-content capture
• No advertising cookies, no third-party tracking
• No selling of your data, and no advertising or behavioural profile — the only account data we hold is what's needed to run your eBay sign-in and deliver the alerts you asked for

Cookies and storage

On the marketing website, PostHog stores a random anonymous device ID in localStorage so repeat visits aren't double-counted. Clearing your site data in Chrome wipes it.

Inside the extension, we use chrome.storage.local for your tags, settings, recent searches, and the pseudonymous tag-sync token. Nothing is shared cross-device unless you opt in to the optional sync service. The extension never sets advertising cookies.

Your rights and how to opt out

On the website: use your browser's tracking-protection features or block us.i.posthog.com in your network. To delete a contact-form submission, email contact@roverextension.com.

In the extension: open Settings → Privacy & data to turn off anonymous usage analytics, clear recent searches, or clear synced tags (which also wipes them from Rover's backend). Sign out from Settings → Account to stop the optional cross-device sync.

Contact

Questions about this policy, or want to delete a contact-form submission? Use the contact page or email contact@roverextension.com.