AutoLaneDirect privacy information

Prepared 12 November 2026

Seller-account access is not enabled. This notice describes these static connection pages and the proposed read-only eBay seller integration. The arrangements for live seller-data retention, deletion and lawful processing still require confirmation before activation.

Operator and contact

AutoLaneDirect is operated by Daniel Connor, a sole trader / self-employed operator in the United Kingdom. For privacy questions and requests, contact ancermas@gmail.com.

Purpose

AutoLaneDirect is a desktop application for automotive-parts research and profitability analysis. The proposed seller connection is intended to read authorised eBay listing, inventory, order and financial information for inventory management, sales records and financial analysis. It is not enabled by visiting these pages.

Information handled by these pages

An eBay authorisation return can include a temporary authorisation code or error, a connection state and an expiry value. The page processes that response in the browser, removes its query from the visible address and encrypts the response for the initiating desktop application before opening its application link. An encrypted return is not an access token and does not itself connect an account.

These packaged pages contain no application secret, account credentials, analytics, advertising scripts, tracking pixels, forms or application-cookie/storage code. They do not request an eBay password or import listings, orders or financial transactions. Sign-in and authorisation take place on eBay.

Hosting and browser exposure

The pages are intended for Cloudflare Pages hosting. The hosting provider receives ordinary request information, such as the IP address, browser information, requested path and any query sent to it. Removing the visible query and encrypting the application link cannot remove information already received by eBay, the hosting provider, browser history or security software. Hosting security features and log retention depend on the actual account configuration and provider arrangements; they have not yet been confirmed for live access.

Authentication tokens

The callback page handles a temporary authorisation response, not an eBay password or a long-lived access token. Token exchange is intended to take place in the desktop Python backend. The prepared backend provides Windows Credential Manager storage for seller access and refresh tokens. Real-account token storage and refresh have not yet been activated or validated. Tokens must not be placed in this website, its source files or application links.

Proposed seller-data handling

If separately enabled, the desktop integration would receive data from eBay according to the permissions granted. Depending on the API response this may include seller and listing identifiers, quantities, orders, buyer or delivery information, fees, payouts and other transaction information. The static callback pages do not fetch those records. The prepared desktop adapters stage selected seller records in local SQLite storage and preserve separately entered inventory costs and stock corrections. API responses can contain personal information; the exact fields retained by a live integration still require review. Live storage, backup, retention, deletion and any additional sharing arrangements must be confirmed before seller access starts. No account-data retention period is stated here because none has been approved.

Your choices and questions

You can decline eBay authorisation. If access is later granted, it can be revoked through eBay’s account permissions settings; revocation does not by itself establish that previously saved records or backups have been deleted. For questions or requests concerning your personal information, including access, correction or deletion where applicable, contact Daniel Connor using the privacy email above. The lawful basis, retention arrangements and operational procedures for handling live seller data and privacy requests must be confirmed before this notice is used for live seller access.

Do not send passwords, access tokens or temporary authorisation responses in messages. This pre-activation notice does not claim that an operational seller-data privacy policy or deletion service is already in place.