Privacy Policy

Who we are

The CATRP eBay Challenge is a private eight-week coaching programme for members of the CATRP Discord community. It's operated by CATRP (Chase After The Right Price) and runs at ebaychallenge.catrp.com. This policy covers what data we collect when you use the app, why we collect it, and what your rights are.

What data we collect

From Discord

When you sign in with Discord we receive your Discord user ID, username, avatar URL, and whether you're a member of the CATRP Discord server. That's all — no messages, no other server memberships, nothing else.

From eBay (only if you connect your account)

Read-only access to your listings and order history:

• Your active listings and their metadata (title, price, watchers, listing age)
• Your orders and line items
• Your offer settings and best-offer floors

We never write to eBay. We never end, edit, cancel, or create listings. We never send messages, accept offers, or modify prices. If you want to change a listing, you do it on eBay yourself.

From you directly

Your preferences (currency, timezone, listing cadence, markdown-ladder percentages), your daily checklist ticks, and your Weekly 1% Task completion status.

Automatic

A session cookie (required to keep you logged in), an optional "remember me" cookie (only if you tick that box), and standard server logs (IP address, browser user-agent, timestamps) kept for 30 days. No third-party analytics, no ad trackers, no fingerprinting.

How we use it

• To auto-populate your dashboard: sales counts, gross figures, sell-through rate, aged-inventory recommendations
• To render your daily checklist and track your Weekly 1% Task
• To show your presence on the "checked in today" crew strip (only if you have that on in Settings)
• To send you occasional email about the challenge (kickoff, review call, closing) — nothing marketing

What we don't do

• Sell your data to anyone
• Share your eBay data with other users or third parties
• Use your data for advertising
• Use analytics tools that fingerprint or profile you
• Store your eBay password (we use OAuth — we never see it)

Sharing with third parties

The only third parties involved in delivering the service:

• Discord — handles authentication via their standard OAuth flow. Discord's privacy policy applies to that interaction.
• eBay — handles the OAuth authorization for their API and stores your consent. eBay's privacy policy applies to your interaction with eBay itself.
• MailerSend — sends the small number of transactional emails we send you. They see your email address to deliver messages, nothing else.
• Our hosting — the app runs on a Plesk-managed Linux server rented by CATRP. All data lives in databases we control on that server.

No other third parties. No ad networks, no data brokers, no marketing platforms.

Sharing within the crew

Other crew members can see your Discord username and avatar in the shared strip that shows who checked in today. You can turn that off in Settings → Privacy — your daily ticks will still count toward cohort totals, you just won't appear by name.

Nobody else ever sees your eBay data.

How long we keep your data

• While you're active — your account and its data are kept for as long as you're a member of the CATRP Discord and using the app.
• eBay data — if you disconnect eBay from Settings, or revoke access from your eBay account, we purge our copy of your eBay-derived data within 30 days.
• eBay account deletion — if eBay tells us your eBay account was closed, we purge your eBay-derived data within 30 days as required.
• Full account deletion — email privacy@catrp.com to request full deletion and we'll wipe everything within 30 days.

Server backups rotate on a 30-day cycle, so any deletion may take up to 30 days to propagate through backups.

Your rights

Under UK and EU data protection law, you have the right to:

• Access — request a copy of the data we hold on you
• Correct — ask us to fix anything inaccurate
• Delete — ask us to remove all your data
• Object — ask us to stop processing your data
• Portability — receive your data in a machine-readable format

To exercise any of these, email privacy@catrp.com. We respond within 30 days.

Cookies we use

Two cookies, both technical:

• PHPSESSID — session cookie, expires when you close the browser
• ebc_remember — optional persistent login token, expires after 30 days or when you log out. Only set if you tick "remember me."

No third-party cookies. No tracking. No advertising cookies.

Security practices

• All traffic is HTTPS
• Discord and eBay OAuth tokens are stored server-side, never exposed to the browser
• Remember-me tokens are hashed before storage
• The database is only accessible to the app's process on our internal network

Changes to this policy

If we materially change what we collect or how we use it, we'll notify active users by email and post an announcement in the CATRP Discord #ebay-challenge channel at least seven days before the change takes effect.

The last updated date at the top of this page reflects the most recent revision.