Trust Center

All purchases are completed on our eBay storefront. We never see or store payment card, bank, or PayPal details, and this website has no checkout or card-entry form.

Buyer protection, dispute resolution, and transaction records are handled by eBay under eBay's own terms.

• Served exclusively over HTTPS/TLS.
• Admin dashboard requires authenticated sign-in with role-based permissions stored server-side.
• Database access is enforced with row-level security policies; public forms can write only their own records.
• Public forms are protected by Cloudflare Turnstile with server-side verification, plus rate limiting and spam heuristics.

• Contact, offer, and question submissions (name, email, message).
• Item-alert and newsletter subscriptions (email, keywords/categories, consent record).
• Wishlist and recently-viewed items — kept only in your browser's local storage by default, not on our servers, unless you opt in to an email watch on the wishlist page, at which point those saved items and your email move to our server.
• Standard request metadata (IP, user-agent) recorded by our hosting provider for security.

Full detail lives in our Privacy Policy.

• eBay — storefront, checkout, order and buyer messaging.
• eBay Browse API — official eBay data feed used to show our public listings on this site.
• Lovable Cloud — application hosting, database, authentication, and file storage.
• Cloudflare — Turnstile bot protection for forms.
• Transactional email provider — delivers alert, newsletter, and reply emails from our notify subdomain.

We use strictly necessary cookies and browser storage only — session state, wishlist, and preferences. We do not run advertising pixels, cross-site trackers, or behavioral ad networks.

See the Cookie Notice for the full list.

• We don't run an automatic deletion schedule for most records — form submissions, offers, item alerts, and saved-item email watches are kept until you unsubscribe, use a stop link, or ask us to delete them.
• Newsletter and alert subscriptions: kept until you unsubscribe.
• Saved-item email watches: kept until you use the stop link in a watch email or ask us to remove it.

Every marketing and alert email includes a one-click unsubscribe link that takes effect immediately.

You can request a copy of the data we hold, correction of inaccurate data, or deletion at any time. Email legacyestatecollection@gmail.com with the subject "Privacy request" and we will respond within 30 days. You may also write to us by mail at Legacy Estate Collective, 112 N Flowers Mill Rd, Unit #475, Langhorne, PA 19047, or call (484) 238-0039.

Data tied to an eBay order must be requested through eBay, since they control that record.

If you believe you've found a vulnerability in this website, email legacyestatecollection@gmail.com with the subject "Security report" and steps to reproduce. Please do not access other people's data or run disruptive testing. We aim to acknowledge reports within 3 business days.

Every piece is described from the item in hand, with condition notes and flaws photographed. We do not claim third-party certification unless a listing includes the certificate. See our Authenticity Policy.

We aim to meet WCAG 2.1 AA as an ongoing goal. Read our Accessibility Statement or tell us about a barrier you hit.

Our hosting platform secures the infrastructure, network, and managed database. We are responsible for this site's content, access control, and how we handle your submissions. You are responsible for safeguarding your own email account and eBay credentials — we will never ask you for a password or payment details by email.

We are a small family-run reseller. We do not hold SOC 2, ISO 27001, PCI DSS, or similar certifications, and we do not claim to. Because checkout runs entirely on eBay, card data never touches our systems.