CrosslyPrivacy Policy
Last updated: 14 October 2026
Crossly is a trading name of Ryan Jamieson, a sole trader at 1 Ladygate, Haverhill, Suffolk, CB9 8NA, United Kingdom, who is the data controller for the website and subscription. Contact: support@crossly.co.uk.
The short version
The Crossly extension keeps your selling data in your own browser. Our servers only know your email address, your subscription status and which browsers you've connected. We don't sell data, show ads or track you across websites.
What the extension does with data
To cross-list and delist, the extension works with the marketplace websites you use, in your browser:
- Listing data you enter or import (titles, descriptions, photos, prices, sizes, SKUs, costs, sales, expenses and notes) is stored in your browser's extension storage on your computer. It is not sent to us.
- Marketplace pages. When you post, import, sync or delist, the extension opens the marketplace's own pages and reads or fills them, the same as you would by hand. The information goes only between your browser and that marketplace.
- Sign-in checks. The extension checks whether you're signed in to each marketplace by looking at that site's cookies or loading a page only signed-in users can see. It never reads, stores or sends your marketplace passwords.
- Seller profile. Details you choose to save in Profile (such as name, address and phone) stay in your browser and are only used to fill marketplace sign-up forms when you ask. Crossly never stores passwords, bank or card details, or ID numbers.
- eBay sold prices. If you use "Check sold prices", the extension searches eBay's public sold listings from your browser.
The extension sends one thing to crossly.co.uk: a request to check that your subscription is active, using a random token for your browser. That request contains no listing or marketplace data.
What our website and servers hold
- Account: your email address and your Stripe customer ID, subscription status and renewal or trial dates.
- Connected browsers: a hashed token for each browser you connect, a label such as "Chrome on Windows", and when it last checked in.
- Sign-in: hashed one-time codes and a sign-in cookie, which is strictly necessary to keep you signed in. We don't use analytics or advertising cookies.
We use this to provide the service you've signed up for (the lawful basis is performance of a contract) and to prevent abuse (legitimate interests).
Who processes data for us
- Stripe takes payments. Your card details go to Stripe, never to us. See Stripe's privacy policy.
- Cloudflare hosts the website and its database.
- Resend sends sign-in emails.
Some of these providers process data outside the UK under appropriate safeguards such as the UK International Data Transfer Addendum.
How long we keep it
We keep account details while you subscribe and for up to 6 years after, as needed for tax and accounting records. Sign-in codes expire after 15 minutes and are deleted within a day. Connected-browser tokens are deleted when you disconnect them or connect a newer browser. Data in your browser stays until you delete it or remove the extension.
Your rights
You can ask to see, correct or delete the data we hold about you, or object to how we use it, by emailing support@crossly.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
Chrome Web Store disclosure
Crossly's use of information received from browser APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide Crossly's features to you, is not sold, and is not used for advertising or credit decisions.
Changes
We'll update this page if anything changes, and email subscribers about significant changes.