Privacy and terms
Last updated November 6, 2026. The Iron Lot is in a closed beta; this page will change as it grows, and changes will be posted here.
The short version: we keep as little as we can, we don't sell or share it, there are no ads or trackers, and you can delete your account yourself at any time.
Browsing without an account
- We don't use analytics, ad networks or tracking pixels, and we set no cookies until you sign in.
- To stop abuse, a few features (the AI price check, "Something wrong?" reports and sign-in links) count requests per visitor. For that we keep a one-way, salted hash of your IP address, never the address itself.
- Our host (Fly.io) keeps ordinary server logs for a short time, as every website's host does.
- Listing photos load directly from the seller's site (eBay, GSA Auctions or the dealer), which can see that your browser asked for them, as with any image on the web. Everything else on our pages comes from our own server.
With an account
Signing in is optional. If you do, we keep:
- your email address, and your name and Google account ID if you sign in with Google (we never see or keep your Google password, and the sign-in tokens Google gives us are used once and dropped);
- when you last signed in;
- your hunt list, home zip code and search radius;
- the lots you save, and the reports you send.
We use these only to run the site for you: your saved lots, your hunt list at the top of the results, and your default search. We don't email you except the sign-in links you ask for.
Cookies
| Cookie | What it's for | How long |
|---|---|---|
il_session | Keeps you signed in | 30 days, or until you sign out |
il_oauth_state | Protects the Google sign-in from forgery while it happens | 10 minutes |
il_owner | The site owner's admin access | 30 days |
Who else handles data
- Fly.io hosts the site and its database.
- Google handles "Continue with Google" and sends our sign-in emails.
- "What's it worth?": the listing text you type is sent to an AI model (Fireworks) to read the brand and model, and the "AI price check" button sends the brand and model to Google Gemini to look up a new price. Don't paste personal details into that box.
None of them get your account details from us, and we don't sell or rent anything to anyone.
Deleting your data
Use Delete my account at the bottom of your account page. It removes your account, your hunt list, your saved lots and your zip code at once. Reports you sent stay, with your name taken off them. Or email hello@theironlot.com and we'll do it for you, or tell you what we hold.
The listings
- Lots come from eBay (through eBay's official API), from GSA Auctions (the U.S. government's surplus sales, through its official API) and from dealers who send us their inventory. Each one links to the seller's own page.
- You buy from the seller, not from us. We don't handle payment, shipping or pickup, and we aren't a party to any sale. Check the item, the seller and the price yourself before you pay.
- Our appraisals are estimates. The new price, the "% of new" and the grade come from our catalog and rules, and they can be wrong. They're a starting point, not a professional valuation. If one looks off, tap "Something wrong?" on the card.
- Some eBay links may earn us a small commission through the eBay Partner Network, at no cost to you. It never changes the order of the results or the appraisal.
- Brand names and product names belong to their owners. We aren't affiliated with or endorsed by any maker, eBay or the GSA.
Using the site
- The site is free and provided as is, without warranties, during the beta.
- Please don't scrape it, overload it, or use the report and sign-in forms to spam.
- We can remove any listing or report, and suspend an account that abuses the site.
Questions: hello@theironlot.com.