DZ Cooker

Privacy Policy

Last updated: 8 August 2026

1.Overview

DZ Cooker is a private e-commerce management application that runs entirely on its operator's own computer. It has no hosted service, no user accounts and no customer base: it is operated by one person, for that person's own eBay seller account.

This policy describes what DZ Cooker accesses, why, and where it is kept. It is the privacy policy of DZ Cooker itself, and is not a substitute for eBay's own policies.

2.Information Accessed

When the operator connects an eBay seller account, and only within the permissions that account explicitly grants, DZ Cooker may access:

• the seller account identifier associated with the authorisation;
• active listings and their identifiers;
• listing titles, prices and currencies;
• inventory quantities and quantities sold;
• listing performance metrics and traffic statistics, such as views, impressions, transactions and conversion rate;
• eBay category and item-specific reference data, which is public information.

DZ Cooker does not access buyer identities, messages, payment details, payout information or any part of the eBay account beyond what the functions above require.

3.How Information Is Used

Accessed information is used only to operate the features the user asks for:

• displaying the seller's own active listings;
• displaying performance and traffic statistics for those listings;
• ending a listing when the user explicitly requests it and confirms the action;
• preparing listing drafts from product information the user supplies.

No profiling, scoring or advertising use is made of this information.

4.OAuth Authentication

DZ Cooker never collects, sees or stores the user's eBay password.

Authentication and consent are handled directly by eBay through its own OAuth consent screen. DZ Cooker receives access and refresh tokens only after the user has explicitly granted access on eBay's own website, and only for the scopes shown on that screen.

5.Data Storage

DZ Cooker operates no server and no cloud storage. Everything it keeps stays on the operator's own computer:

• OAuth access and refresh tokens are stored in a local file, readable only by the operating-system account that runs the application;
• application data required for DZ Cooker's features — listings loaded for display, cached statistics, local settings and counters — is stored locally;
• API credentials configured by the operator remain in a local configuration file and are never transmitted to the browser extension.

6.Data Sharing

DZ Cooker does not sell eBay user data. It does not share eBay data with advertisers, data brokers or analytics providers, and it contains no tracking of any kind.

Information leaves the operator's computer only when a feature requires it:

• eBay APIs — for the operations described in section 3.
• Configured AI/API providers — when the user generates a listing draft, the product information used for that draft, together with public eBay category names, is sent to the AI provider the operator has configured. That provider may be a model running locally on the same computer, in which case nothing leaves the machine at all.

7.Data Retention

Because storage is local, data remains on the computer until it is removed. It is deleted when:

• the user disconnects the eBay account in DZ Cooker, which deletes the stored OAuth tokens immediately;
• the user deletes the application's local data files;
• the user uninstalls the application.

DZ Cooker does not perform automatic expiry of locally stored application data beyond the caches it refreshes in normal use.

8.Security

Tokens and credentials are held in local files with restricted permissions and are never exposed to the browser extension, to diagnostic exports or to the application's distributable package. The local service accepts connections only from the loopback interface of the machine it runs on, and only from the application's own extension.

No software is perfectly secure. Because DZ Cooker runs on the operator's computer, the security of that computer is part of the security of the data.

9.Revoking eBay Access

Authorisation can be withdrawn at any time, in either place:

• in DZ Cooker: Réglages → eBay → Déconnecter, which deletes the stored tokens from the computer;
• in the eBay account settings, under the section listing third-party applications granted access.

Revoking on eBay's side invalidates the tokens even if a copy still exists locally.

10.Third-Party Services

• eBay — used for authentication and for all listing, category and statistics operations. Use of eBay remains governed by eBay's own terms and privacy notice, which apply in addition to this policy.
• Configured AI/API providers — used only for the listing generation feature, and only with the provider the operator chooses. Their own policies apply to the data they receive.

11.Changes to This Policy

This policy may be updated when the application's behaviour changes. The date at the top of the page reflects the last revision. Material changes to what is accessed or transmitted will be reflected here before the corresponding feature is used.

12.Contact

For privacy-related inquiries, contact the operator of DZ Cooker through the contact method provided with the application.