Loot Lister privacy policy
Last updated October 21, 2026. Loot Lister is run by Windrose Compass LLC. This policy says what the Loot Lister app and website collect, where it goes and how to delete it. Questions go to support@lootlister.com.
Your account
Loot Lister keeps your email address, your settings (goals, listing defaults, reminders and rules) and your pile count. If you sign in with Apple, it keeps the ID Apple gives the app, the email Apple shares and the first name you allow. Sign-in codes are sent by email through Resend. On the web, your sign-in is kept in your browser's local storage.
Photos and what you tell Mimic
Photos you take are stored in Google Cloud Storage while the listing is made. Once eBay has the listing, Loot Lister deletes its copies, because eBay keeps its own. Photos of an item that isn't listed stay until you delete the item or your account.
To identify, describe and price each item, its photos and the details and notes you enter are sent to Anthropic, whose Claude models write the listing. Anthropic doesn't use them to train its models. The same goes for a listing you ask Mimic to rewrite.
Your eBay account
When you connect eBay, eBay gives Loot Lister a token that lets it create and change your listings, read your shipping, return and payment policies, and read your listings, orders and sales. The token is stored encrypted. Loot Lister never sees your eBay password or your payouts.
Loot Lister keeps what it reads from eBay to run your Feed, pull list, Stats, Listings and Autopilot: your eBay username, policies, listings with their prices, views and watchers, and each order's items, prices and dates. It doesn't keep buyers' names or addresses. It also keeps one record of each listing it made (eBay item number, title, price and date).
The ZIP code your items ship from is sent to Zippopotam.us to look up its city and state.
Notifications
If you turn on notifications, your phone's push token is stored with your account and notifications are sent through Expo's push service to Apple or Google. Signing out removes this phone's token.
Teams
When you invite someone to your team, Loot Lister stores their email address and sends them the invite through Resend. Items they list are marked with their email.
Payments
Card payments are taken by Stripe; Loot Lister keeps your Stripe customer ID and your plan, never your card number. Purchases in the App Store or Google Play are made with Apple or Google, and Loot Lister checks each one with them and keeps its record.
Running the service
Loot Lister runs on Google Cloud, and requests to the app pass through Cloudflare. Loot Lister counts the AI work and credits each item used, to bill credits and set limits.
Deleting
Disconnecting eBay in Settings removes the token and everything Loot Lister read from eBay. Deleting your account in Settings removes your account, photos, settings and everything stored about it, and cancels a card plan. A plan bought in the App Store or Google Play is cancelled in the store. Your eBay listings stay on eBay.
We don't sell your information.