> ## Documentation Index > Fetch the complete documentation index at: https://dexflip.app/docs/llms.txt > Use this file to discover all available pages before exploring further. # Privacy policy > What DexFlip collects, where it goes, how long it is kept, and your choices **Last updated: 16 September 2026** DexFlip is an iPhone app made by Collin Makohon. This policy covers the app and the small sign-in relay it uses for eBay. Questions go to the issue tracker at [github.com/cmakohon/dexflip-issues](https://github.com/cmakohon/dexflip-issues). ## In short * **Your data stays on your iPhone.** There is no DexFlip account and no DexFlip server holding your cards, photos or listings. * **It leaves only when you send it.** Listings go to eBay when you publish. Exports go to your Google Drive when you export. * **Nothing expires on a timer, and nothing is deleted without you.** You decide when a card goes. * **Nothing is sold, shared for advertising, or used to train anything.** The app has no analytics, no advertising, no tracking and no third-party code. This policy covers DexFlip. eBay, Google and Apple have their own policies for what they do with data you give them. ## What the app stores on your phone | Data | Why | Kept until | | ------------------------------------------------------- | ----------------------------------- | ------------------------------------------------------- | | Photos of your cards | To identify them and to list them | You delete or remove the card | | Each card's match, printing, condition and price | To build listings | You delete or remove the card | | Listings, their titles, prices, descriptions and covers | To publish them | You un-build them, or remove their cards once published | | Your ship-from ZIP code and chosen eBay policies | eBay requires them on every listing | You change them, or unlink eBay (policies only) | | Your pricing preferences | To price new cards | You change them | | Your eBay username and Google email address | To show which accounts are linked | You unlink | | eBay and Google access tokens | To act on the accounts you linked | You unlink, or the service ends the link | | The IDs of the Drive folder and sheet the app made | To add to the same sheet next time | You delete the app, or export to a different account | **Photos are stored inside the app, never in your photo library.** Location and other metadata are removed before a photo is stored or sent. Access tokens are kept in the iOS Keychain, on this phone only. They are not synced to iCloud Keychain. Everything else is in the app's own storage. It is included in your iPhone backup if you back up, and it is not synced to iCloud or any other device. ## What the app sends, and to whom | Recipient | What | When | | ---------------------------------------- | ------------------------------------------------------------------------------------------- | ----------------------------------------- | | eBay | Listing photos, title, price, condition, description, card details, your ship-from ZIP code | When you publish, or open a live listing | | eBay | A request for your username | When you link eBay | | DexFlip's eBay sign-in relay | The one-time sign-in code, and the renewal token for your link | When you link, and when the link renews | | Google | Card photos, sheet rows, an optional timestamp photo | When you export | | Google | A request to withdraw DexFlip's access | When you unlink Google | | TCGdex | The catalogue number of a card, to fetch its market price | In Review, and when Home refreshes prices | | TCGdex | Requests for the catalogue's reference image of a card | In Review | | DexFlip's price file host, on Cloudflare | A plain download request, with no information about you | When the app opens | Every request also carries your phone's IP address, as all internet traffic does. **Card recognition runs entirely on the phone.** Your photos are not sent anywhere to be identified. ### The eBay sign-in relay eBay requires a secret key to finish a sign-in. The relay holds that key so it never ships inside the app. It passes your one-time sign-in code, or your link's renewal token, to eBay and returns the answer to your phone. * **It stores nothing.** It has no database. * It records one line per request: the path, the result code and how long it took. It does not record codes, tokens or addresses. * Cloudflare, which runs it, uses your IP address to limit how often sign-ins can be attempted. ### Export to Sheets Export to Sheets creates a folder named **DexFlip** in your Google Drive and **shares it so anyone with the link can view it**. The sheet and photos inside inherit that sharing. This is what lets the photos show inside the sheet. The app can reach only the files it creates. It cannot see anything else in your Drive. Google access covers your email address and the files DexFlip creates. Nothing more. ## What the app does not do * It does not collect analytics, usage statistics or crash reports. * It does not show advertising or use an advertising identifier. * It does not track you across apps or websites. * It does not ask for your location, contacts, microphone or notifications. * It does not see your eBay or Google password. Both sign-ins happen on the provider's own page. * It does not see your eBay sales, buyers, messages or payouts. ## How long it is kept **Nothing expires on a timer.** The app deletes a record only when you tell it to, with two exceptions: * A lot's per-card photos are deleted from the phone once the lot publishes. The cover is kept. * A photo left behind by an interrupted delete is cleaned up the next time the app opens. You get no warning before either, because neither removes anything you still need. Data you sent to eBay or Google stays there under their policies until you remove it there. Deleting a card in DexFlip does not remove its listing or its exported rows. ## Your choices | To | Do this | | -------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | | Delete a card and its photos | Delete it in Review, Compose or the pile, or remove it from Published | | Stop DexFlip using your eBay account | Unlink eBay in Settings. To withdraw access at eBay too, remove DexFlip from your eBay third-party app permissions | | Stop DexFlip using your Google account | Unlink Google in Settings. This also withdraws access at Google | | Stop sharing your exports | Change the DexFlip folder's sharing in Google Drive, or delete it | | Delete everything on the phone | Delete the app | | Ask a question or make a request | Open an issue at [github.com/cmakohon/dexflip-issues](https://github.com/cmakohon/dexflip-issues). It is public, so leave personal details out | Because DexFlip holds no data about you off your phone, there is nothing for it to hand over or delete elsewhere. A request about data on eBay or Google goes to them. ## Children DexFlip is not directed at children under 13 and does not knowingly collect their information. ## Changes A change to what is collected, where it goes, or how long it is kept updates the **Last updated** date above. Rewording that changes none of those does not change the date.