Permissions and data: understand access, storage, and sharing
Learn how to understand each Chrome permission DropFlowLister uses, what data it keeps, and where that data goes.
On this page
Chrome asks you to approve permissions when you add DropFlowLister. This article explains, in plain words, what each one is used for and what happens to your data.
Key points
- Permissions run the automation: DropFlowLister opens tabs, reads supplier pages, and fills marketplace forms for you. Each permission supports one of those jobs.
- Most settings stay in your browser: Flow Lister settings, AI prompts, region, and your Replicate key are saved on your computer.
- Some data is saved to your account: Stores, templates, shipping policies, credits, and listing history are saved on the DropFlowLister server so they work on any computer.
- We never ask for your passwords: DropFlowLister works with the marketplace and supplier accounts you're already signed in to in Chrome.
Before you start
- To see the permissions in Chrome, go to
chrome://extensions, find DropFlowLister, and click Details.
Why DropFlowLister needs each permission
| Chrome permission | What DropFlowLister uses it for |
|---|---|
| storage and unlimitedStorage | Saves your settings, prompts, run progress, and results in your browser. Large runs and image data need more than the normal limit. |
| scripting | Adds DropFlowLister tools to supplier and marketplace pages and runs steps like filling the listing form. |
| tabs | Opens, switches, and closes tabs during runs, such as opening a supplier page and then the marketplace listing page. |
| webRequest | Reads request details that the marketplace sends on a few pages: Poshmark sales pages and eBay listing-draft requests. This lets DropFlowLister finish actions on pages you're signed in to. |
| webNavigation | Knows when a page has finished loading so the next step can start. |
| alarms | Runs Auto-Scheduling at the time you pick, and refreshes things like your VeRO lists every hour. |
| notifications | Shows Chrome pop-up messages, like "Auto-Schedule Started" or "Auto-Schedule Failed". |
| downloads | Saves files you export, such as results, logs, and lists. |
| declarativeNetRequestWithHostAccess | Blocks images in background scraping tabs to make them faster, while still letting CAPTCHA checks load. |
| debugger | Sends real mouse clicks on Amazon pages during automated ordering, where normal script clicks don't work. |
Why Chrome says DropFlowLister "started debugging this browser"
Chrome shows a bar that says DropFlowLister "started debugging this browser" when the debugger permission is in use. This only happens during automated steps on Amazon that need real clicks. The bar goes away when the step ends.
Important: Don't click Cancel on that bar during a run. The step may fail, and you'll need to retry it.
Which sites DropFlowLister can access
| Sites | Why |
|---|---|
| Supplier sites: Amazon, AliExpress, Walmart (US, CA), Target, Bed Bath & Beyond, and Home Depot | Reads product details, prices, stock, and images. Supported today: amazon.com, amazon.ca, AliExpress, and Walmart. |
| Marketplace sites: eBay (US, CA, UK, AU, DE, FR, IT, ES, NL) and Poshmark (US, CA) | Adds tools to the page and creates or updates your listings. |
| Image servers used by these sites (for example eBay, Amazon, AliExpress, and Walmart image servers) | Downloads product photos for your listings and templates. |
| dropflowlister.com | Your account, plan, stores, templates, and the web app. |
| Replicate | Sends images to Replicate only when you turn on AI Image Enhancement. |
Having access to a site doesn't mean the extension is always reading it. It acts when you use a tool or start a run.
DropFlowLister's supported suppliers are Amazon, AliExpress, and Walmart. Target, Bed Bath & Beyond, and Home Depot aren't supported yet.
What data is saved, and where
| Data | Where it's saved |
|---|---|
| Sign-in session | In your browser |
| Flow Lister settings, AI prompts, region, run progress | In your browser |
| Your Replicate API key | In your browser only |
| Auto-Scheduling times | In Chrome sync storage, which can follow your Chrome profile |
| Stores, markups, templates, shipping policies | Your DropFlowLister account |
| Credits and listing history | Your DropFlowLister account |
| Buyer details copied with Copy Buyer | Your DropFlowLister account, so you can paste them on another computer |
What DropFlowLister sends to its server
-
Your plan check: Your sign-in session is used to check your plan.
-
Listings: Product details are sent for AI optimization when you use AI features.
-
Your eBay store ID: Used so Market Analyzer can leave your own store out of competitor results.
-
Reports: When you send a bug report or a VeRO suggestion, your text and any screenshots you add are sent.
-
AI providers: When you use AI features, product data, text, and images go to third-party AI providers (OpenAI and Replicate) to create content for you.
-
How long data is kept: DropFlowLister keeps your data while your account is active and as long as needed for legal, tax, and accounting reasons. After that, it's deleted or anonymized. Backups may hold copies for a limited time.
-
Sign-in data: Account IDs, session or access tokens, and any login details you choose to give for a connected account are stored with industry-standard safeguards and used only to run the service.
-
Listing and usage data: Listing and usage data is sent to DropFlowLister's servers to power features like duplicate blocking and to improve and train AI models. This data is encrypted and secured.
-
No sale of data: DropFlowLister doesn't sell your data, and it follows the Chrome Web Store User Data Policy.
See the full Privacy Policy at https://dropflowlister.com/privacy-policy/.
Your marketplace's rules
Some marketplaces and suppliers limit or ban automated tools, bots, or browser automation. You decide whether, how, and on which accounts to use each automation feature, and you accept the risk. If a site's rules ban a feature, don't use that feature on that site. VeRO and keyword checks only help; they aren't complete and don't replace your own review.
Related articles
Still stuck? Chat with us.
Email contact@dropflowlister.com with your privacy question. DropFlowLister is run by Aurora Asset Management LLC.