RoundLemon — Privacy

Last updated 4 November 2026

RoundLemon is a tool for cross-listing second-hand items across a seller's own marketplace accounts (eBay, Vinted, Facebook Marketplace, Whatnot, Depop, Discogs and WooCommerce). Each user connects their own accounts and sees only their own data.

What data it handles

• Listing, offer, order and payout information from each user's own eBay seller account, read and written through eBay's Sell APIs.
• OAuth tokens for those same eBay accounts.
• Listing information from each user's own Vinted wardrobe, read from Vinted's public pages and, where enabled, its integrations API.
• Notes each user types about their own stock — what an item cost, where it was bought and when.

Where it is stored

In a local SQLite database on a personal computer. The interface is reachable over the internet but every page requires a sign-in, and one user's listings, notes and eBay tokens are not readable by another. The only parts reachable without signing in are this page, the sign-in page itself, and eBay's account deletion endpoint below.

Third parties

Listing titles, descriptions and photographs may be sent to Anthropic's and Google's APIs to draft listing copy and suggest the item specifics eBay requires for a category. Where a user has enabled alerts, listing titles and prices are sent to Telegram. On the public homepage and signup page only, and only if a visitor accepts analytics cookies, Google Analytics receives page views and clicks (see Cookies below). Inside the app there is no analytics. There is no advertising, and nothing is sold or shared.

Cookies

A sign-in cookie keeps you signed in, and an rl_consent cookie remembers your cookie choice for six months. Both are essential and set without asking.

Google Analytics cookies (_ga, _ga_*) are set only if you choose "Accept analytics" on the homepage or signup page. They record which pages are visited, which buttons are clicked and roughly where visitors come from - never what you type into a form. They are not used for advertising. You can change your choice at any time from "Cookie settings" at the foot of the homepage; rejecting deletes the analytics cookies.

The RoundLemon browser extension

The optional Chrome extension, RoundLemon AI Marketplace Lister, works in the user's own signed-in browser. It only talks to the RoundLemon app the user connects it to, using a token the user pastes in, and it only runs on the marketplace and retail sites named in its permissions. It handles:

• The connection token, kept in the browser's extension storage and sent only to the RoundLemon app.
• Listing details and photos fetched from RoundLemon to fill in a marketplace listing form, and the new listing's id and address sent back once it is published.
• The user's own Vinted wardrobe, Vinted orders and the prices they sold at, and their Whatnot purchases and video receipts, read from those sites and sent to RoundLemon to keep stock and sales up to date.
• Postage labels the user chooses to crop. These carry the buyer's name and address, are sent to RoundLemon to be cropped, and are deleted automatically after the number of days set in the user's settings.
• Product and stock information from retail pages the user has chosen to watch.
• A record of Vinted offers sent, kept in extension storage for 30 days so the same buyer is not offered twice.

The extension does not read browsing history, does not run on sites outside its permissions, does not load code from anywhere else, and sends nothing to anyone other than the connected RoundLemon app. Its data is used only to provide these features, and is never sold, used for advertising or used to judge creditworthiness.

Other eBay users

The application does not collect or store data about any eBay user other than the sellers who have connected their own accounts. Where buyer details appear in order information for a completed sale, they are used only to fulfil that sale.

eBay account deletion

eBay marketplace account deletion and closure notifications are received at https://staging.roundlemon.app/webhooks/ebay/account-deletion, acknowledged and logged. Because no third-party eBay user data is retained, there is nothing to erase in response.

Retention

Listing data is kept for as long as it is useful for cross-listing, and is removed when the item is deleted or the account is closed. eBay OAuth tokens are revoked by disconnecting the integration on the Sync settings page.