What happens to your listing data

This is the server version of the FCC ID audit. The complete CSV stays in your browser; a limited set of listing fields is sent to the server for screening.

Only six listing fields are uploaded

The browser extracts item number, title, category 1 name and number, and category 2 name and number. These are normally public listing details. SKU, stock quantity, price, variation descriptions, FCC ID columns and all other columns are discarded before the request is sent. Your file name is not sent. The server rejects any additional listing field.

The excluded variation descriptions may contain clues about transmitters. This screening therefore cannot assess those clues, existing FCC IDs, live item specifics, photographs or the physical product. It does not connect to your eBay account.

Private reports, short retention

Uploaded raw rows are processed in server memory, not saved as a raw CSV. The generated report is stored privately and served only after the server checks the owner browser session and any required full-report access. There is no public report link or public storage address.

Report access expires 24 hours after completion, even if storage cleanup is delayed. Use Delete this report to remove it sooner. Hourly cleanup removes expired reports; storage has a two-day deletion backstop. The operational goal is removal within an hour of expiry, but a cleanup failure can delay physical deletion. Downloaded copies remain wherever you save them.

Your browser session

A secure, HttpOnly, host-only cookie identifies this tool's session. Anonymous sessions last seven days without sliding renewal. A tester session ends with its grant, within 90 days. The page does not save listing data in browser storage. Returning in another browser or after losing the session cookie will not restore access.

Security checks and abuse limits

Cloudflare Turnstile runs on the main audit page to check each run. Network addresses are used briefly for abuse limits, stored only as a keyed hash and removed within 48 hours. Operational logs contain counts, timings, rules versions and fixed error codes, never listing text, item numbers, raw files, cookies or invitation secrets. The invitation page has no third-party scripts.

Payments and tester invitations

When payments are enabled, Square hosts checkout and handles card details. Only the report's opaque reference and amount are sent to Square; listing data is not sent. Server verification of the completed payment is required for full access. Returning from checkout does not unlock a report by itself.

An invitation is a single-use bearer link, not proof of identity. Click Start tester access to redeem it into a new browser session. An unused link can be forwarded, so keep it private. Grant expiry, allowance and revocation are checked on the server.

No AI runs during an audit

AI helped write and test the screening rules. No AI runs when you use the tool, and listing data is not sent to an AI provider.