Privacy policy
Last updated 4 October 2026
This explains what Foragic collects, why, who helps us run it, and your rights. Foragic is a tool for UK eBay resellers: you scan items you find, Foragic identifies them and shows matching eBay listings, and helps you create eBay listing drafts.
Who we are
Foragic is run by its owner, a sole trader in the United Kingdom. We are the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). Contact: [email protected].
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your account: username, email address, password (stored only as a secure hash) | To give you an account, confirm your email and let you log in | Contract |
| Your eBay seller accounts, if you connect them (through eBay's own sign-in; we store eBay's sign-in token encrypted, never your eBay password) | To create listing drafts, show your listings and orders, and do what you ask in your eBay account | Contract |
| Photos and barcodes you scan, item titles, prices, notes and drafts you create | To identify items, find matching eBay listings and build your listings | Contract |
| Usage records: which features ran, when, and what they cost us | To run your plan's allowances, stop abuse and keep costs under control | Legitimate interests |
| Payment records (plan, dates, amounts) — card details stay with Stripe; we never see them | To take payment and keep accounts as the law requires | Contract and legal obligation |
| Technical data: IP address, browser/app version, error reports and feedback you send | To keep the service secure and working, and to fix problems | Legitimate interests |
We don't sell your data, we don't use it for advertising, and we don't show third-party adverts.
Location data and where Foragic is available
Foragic isn't offered in some areas (exclusion zones). To check, we look at where you are — and only for that:
- Your postcode, which you give when you sign up. We look it up on postcodes.io to find its rough position, then keep only the first half (for example "LS6").
- Your internet connection's approximate location (roughly which town), which Cloudflare adds to each request.
- Your browser's location when you sign up on the website, only if you allow it.
- Your phone's approximate location when you scan in the app, only if you allow location access.
- The item-location postcodes on your eBay seller account, checked once when you connect eBay.
These are checked when you sign up or scan and are not stored — we keep only your postcode district and whether your account can scan. We don't track you in the background, build a location history, share or sell location data, or show it to anyone.
Foragic also isn't available to people who work or volunteer for charity shops, charity warehouses or reuse hubs. You confirm this when you sign up, and we check email addresses and eBay seller names that clearly belong to a charity shop.
Who helps us run Foragic
These providers process data for us, only for the purposes above:
- Hetzner (Germany) — the server where Foragic and its database run.
- Cloudflare — security, network and the "I'm not a robot" check (Turnstile), and encrypted nightly backups (kept for 7 days).
- eBay — listing search, your connected seller accounts and drafts, through eBay's official APIs.
- Google (Gemini) — to recognise the items in photos you scan. Only the photo or crop is sent, not your account details.
- postcodes.io — looks up the postcode you give at sign-up (only the postcode is sent).
- Item lookup services, which receive only an item's barcode, title or picture: CeX (webuy.com) for trade-in prices, Brickognize (LEGO), AI Card Vault and trading card databases (Pokémon, Magic, Yu-Gi-Oh!, Lorcana), Open Library (books).
- Resend — sends our emails (for example, confirming your email address).
- Stripe — takes payments for paid plans.
Some providers are outside the UK (for example in the US). Where that happens, data is protected by the UK's adequacy rules or standard contractual clauses.
How long we keep it
- Your account and what you've created: while your account is open. When you delete your account we delete it within 30 days (backups roll off within a further 7 days).
- Shelf scan photos and crops: deleted automatically after 14 days.
- Payment and invoice records: 6 years, because UK tax law requires it.
- Usage and security records: up to 24 months.
Cookies
We only use what the service needs: a login cookie that keeps you signed in, a setting that remembers light or dark mode, and Cloudflare's security cookies (including for the robot check). No advertising or tracking cookies, so there's no cookie banner.
eBay links
Some links from Foragic to eBay are eBay Partner Network links. If you buy something on eBay after clicking one, eBay may pay Foragic a small commission. It doesn't change the price you pay or what a seller receives. eBay handles that click under its own privacy notice.
Your rights
You can ask to see, correct, download or delete your data, object to or restrict how we use it, and withdraw consent where we rely on it. Email [email protected] and we'll reply within one month. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Foragic is for people aged 18 and over, because it's a selling tool linked to eBay accounts.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.