1. About InkWhack

InkWhack is the name used for an independent apparel and design project and its private product and marketplace-management software. The public storefront is currently being prepared. The eBay connection described below is intended for the operator’s own seller account; InkWhack is not presently offering a public multi-user account service.

2. Information that may be processed

Depending on the feature being used, InkWhack may process:

• ordinary technical request information supplied when a browser contacts the website or API, such as IP address, request time, requested URL, browser information and security diagnostics;
• information returned by eBay for an authorised seller account, such as an eBay user or account identifier, seller status, marketplace, selling privileges, inventory locations and business-policy identifiers;
• product, inventory, offer and listing information needed to prepare, create, review or update eBay listings;
• OAuth connection information, including short-lived authorisation codes and access or refresh tokens; and
• limited operational records needed to diagnose a failed marketplace request or confirm that an authorised operation took place.

InkWhack does not intentionally collect special-category information through this public website.

3. Why information is used

Information is used only where needed to operate the website, protect the service, connect the authorised eBay seller account, prepare or manage marketplace listings, troubleshoot requested operations, meet legal obligations, and respond to valid privacy or deletion requests.

Depending on the circumstances, the intended lawful bases are taking steps to provide requested connected functionality, legitimate interests in operating and securing InkWhack and its marketplace tools, and compliance with applicable legal obligations. These bases will be reviewed as the public service develops.

4. eBay OAuth authorisation

When the operator chooses to connect eBay, the browser is sent to eBay’s own sign-in and consent pages. eBay returns a short-lived authorisation response to InkWhack’s HTTPS callback. A random state value is checked to protect the flow against cross-site request forgery.

The callback encrypts the authorisation code for one-time transfer to the local InkWhack application. The local application exchanges it directly with eBay. eBay access and refresh tokens are then encrypted and retained locally so that authorised eBay features can operate. Client secrets, OAuth tokens and private credentials are not intentionally placed in public website files, browser scripts, GitHub or public catalogue data.

Authorising InkWhack does not disclose an eBay password to InkWhack. Access can be withdrawn through the relevant eBay account controls, and a disconnected or revoked connection will need to be authorised again before connected features can resume.

5. eBay account-deletion notifications

InkWhack maintains an endpoint for eBay Marketplace Account Deletion notifications. The present endpoint validates and acknowledges suitably formed notifications but is not yet connected to an automatic deletion routine and does not intentionally persist the notification payload.

Where InkWhack holds eBay-related personal information that must be removed following a valid request or marketplace notification, it will be reviewed and deleted or anonymised unless retention is required for legal, security, dispute-resolution or record-keeping reasons. No product, listing or account data is deleted automatically by the current notification handler.

6. Cookies and browser storage

This minimal public website does not set its own cookies, run analytics or advertising scripts, or use local browser storage. Hosting and network providers may process ordinary request and security information when delivering the site. If the future storefront introduces optional preferences, analytics, checkout tools or other browser storage, this notice and any required consent controls will be updated before those features are enabled.

7. Service providers and international processing

The current public pages are served using GitHub Pages. Cloudflare provides DNS and may provide API, security and delivery services for InkWhack domains. eBay provides seller authorisation and marketplace services. These providers process information under their own terms and privacy notices and may process it in countries outside the United Kingdom.

• GitHub Privacy Statement
• Cloudflare Privacy Policy
• eBay User Privacy Notice

Information is not intentionally sold by InkWhack. It may be disclosed where necessary to operate an authorised service, investigate abuse, protect legal rights, or comply with a lawful requirement.

8. Retention

OAuth relay sessions expire after approximately ten minutes and are designed for one-time retrieval. eBay access and refresh tokens may be retained locally while the connection remains needed, until they expire or are revoked, or until the connection is deliberately removed. Marketplace records and limited diagnostic information are kept only for as long as reasonably needed for their operational, security or legal purpose.

A complete formal retention schedule has not yet been adopted. InkWhack will review retained information as the service develops rather than keeping personal information indefinitely merely because it might become useful.

9. Security

Current safeguards include HTTPS for public callbacks, server-side secrets, CSRF state checking, short-lived encrypted OAuth relay sessions, one-time retrieval, and encryption of OAuth tokens stored by the local application. Public website publication is separated from private production and artwork systems. No system can be guaranteed completely secure, and safeguards will be reviewed as InkWhack changes.

10. Your rights

Depending on the applicable law and circumstances, a person may have rights to be informed, access their personal information, correct inaccurate information, request erasure or restriction, object to certain processing, receive portable information, and complain to the Information Commissioner’s Office. Some rights are qualified and may not apply to every item or purpose.

You may object to processing based on legitimate interests. InkWhack will consider the circumstances and any overriding legal or security reasons for continued processing.

Information about UK data-protection rights is available from the Information Commissioner’s Office.

12. Changes to this notice

This notice may change when the storefront, marketplace integrations, service providers or handling practices change. The latest version will remain at this URL and will show its revision date.