Privacy Policy

Last updated 17 September 2026

This policy explains what personal data Quiksel ("we", "us") collects, why, and your rights over it. Quiksel is a tool that turns your photos and a short note into marketplace listings and, with your permission, posts them to eBay on your behalf, and fills them into the forms of shops such as Vinted, Depop and Facebook Marketplace for you to publish.

The data controller is Zak Howarth, a sole trader trading as Quiksel, of Unit 170417, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, United Kingdom. For anything about your data, email support@quiksel.co.uk, or write to us at that address.

1. What we collect

We collect only what we need to run the service:

• Account details: your name and email address, a securely hashed version of your password (we never store your password in readable form), and which versions of our Terms and this policy were live when you created your account, and when that was.
• Marketplace connections: when you connect eBay, we store the access tokens eBay issues us, encrypted. We never see or store your eBay password.
• Sign in with Apple: if you use it, we keep the identifier Apple give us for you and, encrypted, a token Apple issue us. The token is used for one thing only: telling Apple to end Sign in with Apple for Quiksel when you delete your account.
• Content you create: the photos you upload, the notes you write, and the listings the AI produces for you.
• Purchase data: which plan you are on, when the current month ends, how much of that month's allowance you have used, and any credits left over from a pack you bought before we stopped selling them. Payments themselves are handled by Apple (in the iPhone app) or Stripe (on this website), and we never receive your card number. From an App Store purchase we store only Apple's transaction identifier, which lets us apply what you bought once and never twice.
• Your listing activity: the price, state and view count of listings you publish, so the app can show you what has sold and reduce prices on what hasn't.
• Basic technical data: standard logs needed to keep the service secure and working.

We do not ask for your location, your contacts, or anything from your phone beyond the photos you choose to upload.

Where a photo was taken. A phone can hide details inside a photo, including where it was taken. Quiksel removes them. The iPhone app sends a fresh copy of each photo without them, and our servers remove them from every photo before it is stored, sent to our AI provider or posted to a marketplace, so nobody who sees your listing can tell where the photo was taken.

2. How we use it

We use your data to create your listings, post them to the marketplaces you connect, manage your account and plan, provide support, and keep the service secure. We do not sell your personal data, we do not share it with data brokers, we do not use it to advertise to you anywhere else, and we do not show you ads.

3. AI processing

To write your listings, the photos and notes you submit are sent to our AI provider (Anthropic) to generate the title, description, price and item details. On plans with the photo pile, the photos in a pile are sent too, to work out which of them show the same item. The app asks before the first photo is sent. This content is processed to provide the service to you. Anthropic's default policy for commercial API use is that customer inputs and outputs are not used to train their models.

4. Who we share data with (sub-processors)

We share data only with the providers needed to run Quiksel:

• Anthropic — AI generation of your listings (receives your photos and notes).
• eBay — to create listings on your account, at your instruction.
• Apple — subscriptions bought inside the iPhone app, and notifications to us when one renews, lapses or is refunded.
• Stripe — subscriptions and payments made on this website.
• Render (United States) — hosts the service and its database.
• Resend — sends our account emails (confirming your address, resetting your password). They receive your email address and name.
• Cloudflare — serves this website and sits in front of our servers, and stores your uploaded photos (R2).
• Etsy — if you connect it, the same as eBay above: we store the token it issues us, encrypted, and send it the listings you ask us to post.
• Sentry — error reporting, where enabled. Reports carry your internal account identifier and a technical stack trace only: no name, email, photos or listing text.
• Google Fonts — the two typefaces these pages are set in are fetched from Google's font service, which means your browser asks Google for them and Google sees the request, including your IP address. Nothing else about you is sent, no cookie is set by it, and it happens on the public pages only. We list it because a font is still a third party asking your browser for something (17 September).

The Quiksel browser extension, and the shop browser in the iPhone app

Vinted, Depop, Facebook Marketplace and StockX publish no way for an app to post on your behalf, so for those shops Quiksel fills their form in a browser you are signed into: the Quiksel extension in Chrome (or Edge, Brave or Arc) on a computer, or the shop's own page opened inside the Quiksel iPhone app. This is the one part of Quiksel that runs on your device rather than ours, so it is set out in full.

• Where it runs. On those shops' own pages and on quiksel.co.uk, and nowhere else. The pages are listed in the extension itself, and your browser will not run it anywhere they do not match. It never runs on a shop's sign-in page.
• What it reads from us. Your listing, fetched from our API with the Quiksel session token your browser or app already holds, exactly as this website does.
• What it writes. Your listing, typed into the shop's form, and your photos, attached to it. It presses the shop's publish button only if you have turned on Post it for me in the extension; otherwise, and always in the iPhone app, the last press is yours.
• What it keeps on your device. A copy of your Quiksel session, the shop layouts it fills, your answers to its two switches (Post it for me and whether it may look in on your shops every few hours), the time it last looked, and, only while a form is being filled, the listing and its photos. The extension holds these in your browser's own extension storage; the app holds them on your phone. None of it is shared with the shops.
• What it tells us. Whether you are signed in to a shop (that is what “connected” means for these shops), whether a fill worked, and, when you tell it you published, the address of the listing the shop gave you. There is no password involved and there could not be: Quiksel never sees one.
• Your sign-in to those shops. In Chrome it is your browser's own sign-in, which Quiksel does not touch. In the iPhone app you sign in to the shop on its own page, inside Quiksel, and that sign-in is kept on your phone so you are not asked every time. It never leaves your phone and we never receive it. Deleting the app removes it.
• Your views, likes and sales. So your Overview can show how your listings on those shops are doing, Quiksel reads the figures those shops already show you on your own pages. On a computer the extension does this about every three hours while your browser is open, by opening your own listings page on each shop in a background tab and closing it once read; you can turn that off in the extension and it will only look when you press Look now. In the iPhone app it happens when you open the app, at most every few hours. Only your own listing pages are opened, only listings Quiksel wrote are matched, and nothing is requested from those shops that you could not see yourself.
• What it never does. It sends nothing to anyone but us. No advertising, no analytics, no third party. It does not read your messages, your purchases or anything else on those shops, and it does not look at other websites you visit.

Our promise about extension data (Chrome Web Store)

The extension handles your listings and your Quiksel session for one purpose: filling your own listings into the shop forms you choose and showing you how they are doing. We do not sell or transfer that data to anyone, we do not use or transfer it for any purpose unrelated to that, and we do not use or transfer it to decide creditworthiness or for lending. This is the Chrome Web Store's Limited Use requirement, and we meet it in full.

Some of these providers are based outside the UK/EU; where that is the case, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.

5. Legal bases (UK GDPR)

We process your data to perform our contract with you (providing the service), on the basis of your consent (for example, connecting your eBay account), for our legitimate interests in securing and improving the service, and to comply with a legal obligation — which is why records of payments are kept for six years even after an account is deleted, as tax law requires.

Decisions made by software

Quiksel suggests prices and can reduce the price of a listing it posted, on a schedule you set and can switch off at any time (Account, then Repricing). Those are suggestions and settings, not decisions about you: nothing here profiles you, and no automated decision is made that has a legal or similarly significant effect on you. You can change any suggested price before anything is posted, and you can stop repricing for one listing or for all of them.

About your photos. So that marketplaces can fetch them when we post your listing, your photos are stored at a long, unguessable web address rather than behind a login. Nobody can find one by guessing, but anyone you give the address to can open it — so treat a photo link the way you would any shared link.

6. Keeping and deleting your data

We keep your data for as long as your account is open, because the app is built around your own history: past listings feed your Insights and your best sellers. Activity records — the log behind your "while you were out" card — are kept for 90 days and then deleted automatically. Records of payments are kept for 6 years, because tax law requires it.

• Delete your account whenever you like, from Account → Delete account in the app. On the website it is the Delete my account button in Account. That removes your listings, the photos you uploaded (from our servers and our photo storage), your encrypted marketplace tokens, your seller profile, your repricing settings and the account itself. If you signed in with Apple, we also tell Apple to end Sign in with Apple for Quiksel; if that cannot be done from our side, the app shows you how to do it in Settings.
• Deletion is immediate and permanent, and anything left in that month's allowance, along with any unused credits from an old pack, goes with it. If you subscribed on this website, deleting your account cancels that subscription too, so nothing is charged again. Deleting your account does not cancel a subscription bought in the iPhone app: Apple hold that one, and only you can cancel it, in Settings. We keep only the limited records the law requires us to, such as records of payments for tax purposes, and those are kept no longer than we have to.
• A few things do survive deletion, with you taken out of them. So the one free week and a shop's one-off offers cannot be taken over and over, we keep a one-way scrambled version of your email address (not the address itself), the reference numbers of purchases already paid out, and, for a shop you connected, that shop's own account number, with no name and nothing linking it to you. Records of payments are kept for the 6 years tax law requires. The cost of AI work done for you is kept as a bare amount with nothing to say whose it was. None of this is used for anything else.
• Listings already published stay on eBay. They belong to your eBay account, and you manage or end them there.
• Error reports, where enabled, are kept for a short retention period by Sentry and contain no personal details.
• You can revoke Quiksel's access to your eBay account from your eBay settings at any time, without deleting your Quiksel account.

7. Your rights

You have the right to access your personal data, to have it corrected, to have it deleted, to get a copy of it to take elsewhere, to object to processing we do for our legitimate interests, to ask us to restrict what we do with it while something is being sorted out, and to withdraw consent you have given. Two of those you can do yourself, straight away, on the website: Download my data in Account gives you a copy of everything we hold about you in one file, and Delete my account deletes it. For anything else, email support@quiksel.co.uk. We will respond within one month, as UK GDPR requires.

If you cannot sign in, email us from the address on the account and say what you want: a copy of your data, or all of it deleted. We will do it for you. If the request does not come from that address, or anything about it does not add up, we will ask you for something that shows the account is yours before we act — deleting somebody else's account on request would be the worse mistake.

8. If you want to complain

If you are unhappy with how we have handled your personal data, please tell us first so we have the chance to put it right.

• How to complain. Email support@quiksel.co.uk with "Data protection complaint" in the subject line, and tell us what happened. You do not need to use any particular form of words, and you will not be charged.
• What happens next. We will acknowledge your complaint within 7 days and investigate it. We will tell you the outcome, and our reasons, within 30 days of acknowledging it. If it is complex and we need longer, we will tell you why and give you a new date.
• If you are still unhappy. You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or by calling their helpline on 0303 123 1113. You can go to the ICO without coming to us first, but the ICO will normally expect you to have raised it with us.

9. Security

We hash passwords, encrypt your marketplace tokens at rest, request only the marketplace permissions we need, serve everything over HTTPS, and rate-limit sign-in attempts. No system is perfectly secure, but we take reasonable steps to protect your data.

10. Cookies and storage

We set no advertising cookies, we use no analytics, and there is nothing here that follows you to another website. That has always been true and this section changed on 29 August only because we now ask you rather than assuming.

Quiksel does not use cookies in the usual sense at all. What it uses is your browser's own storage on your device — local storage, which stays until it is cleared, and session storage, which goes when you close the tab. Both are readable only by quiksel.co.uk. Nothing in them is sent anywhere by your browser on its own; your sign-in is read back out by this site's own code and sent to Quiksel to prove who you are, which is what signs you in. It falls into three groups, and you can see and change your answer any time from Cookies & storage, which is in the footer of the main site and linked from the bottom of this page.

Signing you in, and two settings you set yourself — always on

Your session, so you are not asked for your password on every screen; whether you ticked Keep me signed in, which decides whether that session ends when you close the browser or waits for you to come back; the email address a confirmation was sent to, so the reminder can name it; and whether a payment landed, so we can tell you. This is what the law calls strictly necessary: switching it off would mean switching off being signed in, so there is no toggle for it.

Two more things are kept here, and they are here on purpose rather than by accident. Light or dark, and whether animations are on. Neither is a record of anything about you; both are this browser carrying out an instruction you gave it, on your own device, and neither is ever sent anywhere. They sat in the optional group until 31 August, and the effect was that somebody who declined optional storage pressed the sun, watched the page turn light, refreshed, and found it dark again with nothing on any screen explaining why. The animation switch matters more than the colour: it is an accessibility setting, and forgetting an accessibility setting between visits is worse than forgetting a preference.

Whether a remembered theme is strictly necessary in the legal sense is a judgement rather than a settled question, and we would rather write down which way we went and why than leave it unsaid.

One more thing sits here, and only for a few minutes at a time. While you are turning the browser extension on, the shop you were heading for is held in that tab alone, so reloading the hand-off page sends you back to it rather than to the start. It is discarded when the tab closes, and it never leaves your device. Nothing else hides in this group.

The tick box is worth a sentence of its own, because it is the one thing in this group you control directly. Leave it ticked and your session is kept on this device until you sign out. Untick it — which is what to do on a shared or borrowed computer — and it is held only until the browser closes, then discarded. Either way it never leaves your device, and it is stored here rather than sent to us.

Remembering your choices — off until you say otherwise

Whether sounds are on, which shops you ticked last time, which tab you were on, whether the Google and Apple buttons appear on the sign-in card, and whether you have already seen the tour. These are conveniences. Decline them and Quiksel works exactly the same; it just forgets those things between visits.

Measuring how Quiksel is used — nothing today

There is no analytics in Quiksel. This group exists so that if we ever add anything that measures what you do, it is off until you turn it on rather than the other way round, and you will be asked again rather than quietly opted in.

Declining does not merely stop new storage: anything already saved in a group you have declined is deleted from your device at the moment you decline it. The always-on group is the exception, and it is the only one: your session and the two settings above are kept, because declining them is not something the site offers.

11. Children

Quiksel is not intended for anyone under 18, and we do not knowingly collect data from minors.

12. Changes

We may update this policy and will change the date above when we do. Significant changes will be notified in the app.