Privacy Policy

GrailSniper is a private, invitation-only tool for tracking sports card and trading card auctions. Accounts are created by the operator; there is no public sign-up.

We collect what the product needs to work and nothing for advertising. We do not sell personal information, we do not share it with data brokers, we run no advertising trackers, and we use no third-party analytics. You can delete your account and its data from inside the application at any time.

GrailSniper is operated by its owner as an independent service. It is not affiliated with, endorsed by, or operated by eBay Inc., and it is not affiliated with any card manufacturer or grading company.

For any privacy question, or to exercise any right described below, contact privacy@grailsniper.com.

We do not collect payment card details, government identifiers, precise location, or any special-category data, and no part of the service asks for them.

To operate your account and keep it secure; to show the auctions, comparables and valuations the product exists to provide; to enforce the spending caps and safety limits you set; and to keep the audit trail that makes administrative access accountable.

We do not use your data for advertising, we do not profile you for marketing, and no automated decision is made about you that produces a legal or similarly significant effect. The product suggests; you decide.

These are the only third parties that receive any data, and why:

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not disclose it to anyone else except where we are legally required to, or where it is necessary to investigate abuse of the service.

Building price comparisons means holding public information about sellers, including their eBay username. We handle it under two rules.

First, when eBay tells us a member has closed their account and asked to be forgotten, we erase that member’s identifying information from our systems automatically. We remove the username, the credibility grade, and the written analysis, and we delete any stored authorisation for that account.

Second, we keep the transaction facts — what an item sold for, and when — with the identity removed. A sold price is a fact about the market rather than about a person, and deleting those records outright would silently change the valuations every user relies on. Removing the name achieves the erasure; discarding the number would corrupt the product for everyone else.

Account and collection data is kept for as long as your account exists. Session records expire on their own schedule and are removed once expired.

When you delete your account, your data is deleted with it. Audit entries are the one exception: they are retained, but the link identifying you is severed, so the record that an action occurred survives while the record of who it concerned does not. This is deliberate — allowing deletion to erase the audit trail would turn it into a way to remove evidence of someone else’s actions.

You can see and correct your account details in the application at any time. You can disconnect a linked eBay account, which deletes the stored tokens immediately. You can delete individual holdings, watchlist entries, saved searches and comparables.

You can delete your entire account and everything owned by it from your account settings. It asks for your password first, because it cannot be undone.

Depending on where you live, you may also have rights to access a copy of your data, to correct it, to object to or restrict its processing, or to complain to a data protection authority. Write to privacy@grailsniper.com and we will action it. We will never charge you or make you justify the request.

Traffic is encrypted with TLS. Passwords are hashed with Argon2. eBay tokens are encrypted at rest with AES-256-GCM under a key that can be rotated. Every user’s data is isolated at the data-access layer rather than by individual queries, so one account cannot read another’s.

The operator holds an administrative account that can read across accounts for support purposes. Every such access writes an audit record; there is no unaudited path.

Tokens, passwords, session cookies and authorisation codes are never written to logs. No system is perfectly secure, but these are the specific measures in place.

We set cookies for one purpose: keeping you signed in and protecting against cross-site request forgery. They are strictly necessary, and there are no advertising, analytics, or tracking cookies to consent to or refuse. Clearing them signs you out.

The service is operated from the United States, and the third parties named above process data there. If you use it from elsewhere, your information is transferred to and processed in the United States.

GrailSniper is not intended for anyone under 18, accounts are issued individually by the operator, and we do not knowingly collect information from children. If you believe a child has an account, contact us and it will be removed.

If this policy changes materially, the date at the top changes and account holders are notified before the change takes effect. We will not apply a materially different use to information already collected without asking first.