Privacy policy

Cosmos Hill Sales has a public card storefront and a private owner workspace.

Browsing and purchases

The public store shows selected card details, seller-owned photographs and independently saved website prices in USD. Matching printings are grouped by condition, finish and language. The cart is saved in your browser and contains card references and quantities. Cart selections do not reserve stock. Available website products use Shopify checkout, where final availability, discounts, shipping, taxes and payment are confirmed. Shopify handles payment and delivery information under its own policies; this Worker does not collect payment-card details. Optional eBay purchase links use eBay’s checkout and its own prices and policies.

MTG collection inquiries

If you submit the Sell MTG form, we store the contact details, general location, collection description, photo links, handoff preference and consent you provide in a private owner inbox on Cloudflare. We use these details to review your collection and contact you about your inquiry. Every lot is reviewed before any offer; submitting a form does not create a quote, sale, shipment or obligation. Valuable singles are assessed separately from the remaining bulk count. Photo links are stored as links; this form does not upload or automatically fetch your photographs. Only the authenticated owner can read or manage your inquiry. Contact and collection details are retained until the owner removes the inquiry; you can ask for removal using the contact address below. A non-contact submission reference and retry receipt may remain to prevent duplicate inquiries. We use a short-lived signed form token and a keyed hash of your network address for abuse limits; the raw network address is not stored in this inbox, and abuse counters expire after two hours. Cloudflare may process ordinary connection information under its own policies. Do not include payment details, sensitive identity documents or a street address in your inquiry.

Private owner workspace

The owner’s card inventory, images, storage notes, and eBay listing information are stored through Cloudflare. Recognition and pricing features contact TCGTracking and Scryfall. The photo condition assistant can connect to a local Ollama engine on the seller’s PC. Both card images stay on that PC for local analysis; provisional condition suggestions and wear notes are saved with the private batch. An earlier Cloudflare Workers AI pilot is paused. Conditions require seller review and approval. The connected eBay seller’s account identifiers and authorization tokens are retained to manage listings; tokens are encrypted, and the eBay password is never received by this site. Only authenticated owner requests can access these tools and private records. The pullsheet can read a seller-selected eBay order and its earnings to match physical cards and fill sale totals. Saved sales retain the order reference and accounting amounts; buyer addresses, email addresses, and payment details are not stored by this import.

Account controls

Disconnecting eBay removes its saved authorization and hides its associated eBay listing snapshots. Independently owned inventory and catalogue records are retained. Verified eBay account-deletion notifications remove the connected account, its listing-match index and stock-update records, its saved batches and their assets, and its saved storefront records. Legacy inventory listing references and eBay-hosted thumbnail links are removed. Independently owned inventory, scanned inventory photos, box codes and physical order are retained; a non-identifying publication marker prevents accidental duplicate listing. Cloudflare storage changes may take time to propagate. Previously published eBay listings and discount rules remain on eBay until changed there. New imports of eBay content to Shopify are paused. Existing linked products continue to synchronize available quantities; previously copied content must be reviewed or removed in Shopify. Shopify handles its checkout, customer accounts, payments and shipping details. This Worker stores product IDs, stock balances and operation records; it does not store Shopify payment credentials or customer addresses. Remove or hide linked Shopify products before disconnecting the integration. On a verified eBay account-deletion notification, this Worker also deletes products previously imported by this integration after verifying their owner tag, handle and SKU. It preserves the cleanup journal and asks eBay to retry if removal cannot be confirmed. Shopify may retain information in existing orders under its policies. Products unrelated to the import remain unchanged.

Optional campaign measurement

If you allow campaign labels, we remember short campaign labels from a tagged link in your browser for up to 30 days. These labels can be associated with your Shopify order so the owner can review which campaigns led to orders. They do not include your name, email, address, or a visitor identifier. Direct visits do not renew the saved campaign. You can allow, decline, or withdraw this choice using Campaign label preferences; shopping and checkout remain available. Campaign label preferences only control labels saved by givemegear.com. They do not change Shopify’s cookie or advertising settings. We turn this campaign label feature off when your browser sends Global Privacy Control or an explicit Do Not Track request. The campaign label feature does not add a third-party advertising pixel or send purchase events to an advertising network.

Meta browser measurement in Shopify

We have selected Meta’s Conservative browser-only data-sharing option for our Shopify-hosted store pages and checkout. This option uses a Meta browser pixel when a dataset is connected and the applicable Shopify privacy settings permit it. The pixel can share store and checkout activity, such as page views, cart activity and purchases, together with browser and device information and cookie identifiers, with Meta for advertising measurement. Browser privacy controls, ad blockers and Shopify cookie preferences can affect this measurement. Shopify lists marketing and analytics permission as required for this pixel and treats its data as subject to data-sale opt-outs. On our Shopify-hosted store, you can review, decline or withdraw cookie choices using Cookie preferences under Terms and Policies in the footer. Campaign label preferences on givemegear.com control only the separate campaign label feature described above. Meta processes this information under its Privacy Policy.

Infrastructure and contact

Cloudflare and eBay receive ordinary network information when you load their resources. Data is used to provide this store and its owner tools. The sections above explain the separate uses and choices for campaign labels and Meta browser measurement in Shopify. Contact: pwmclorn@hotmail.com.

Mana Pool owner connection

The private owner workspace can connect a Mana Pool seller account. Its access token is stored encrypted and is not returned in diagnostics. The pilot retains exact owned-card mappings, stock-check results and limited order references for review. It does not retain buyer names, addresses or payment details from these order checks. Disconnecting removes the saved access token while retaining the review history. A verified deletion of the linked eBay owner account also removes that owner’s local Mana Pool connection and pilot records. These local actions do not change inventory or close the account at Mana Pool.