Consigner Connect

Consigner Connect links Chrome to your own Consigner workspace, so Consigner can connect the resale marketplace accounts you choose and work with them for you. Nothing is captured, recorded or paired until you confirm it in the extension's popup. INSTALL CHECK When your Consigner portal asks, the extension answers a one-time random challenge so Consigner knows it is installed. No cookies or account data are read for this step. CONNECT A MARKETPLACE Start a connection in Consigner, then click "Grant permission & capture" in the popup. Chrome first asks you to allow access to that one marketplace if you have not already. The extension then reads the cookies that marketplace has set in this browser, which are what keep you signed in, and sends the unexpired ones over HTTPS to your Consigner workspace. They go only to Consigner and are never returned to any web page. Consigner shows which marketplaces it supports inside the app; a marketplace that offers its own sign-in to apps connects there and does not use this extension. SELLER-HUB TOKEN The StockX seller hub signs its own requests with a short-lived access token. When you connect it with a seller-hub tab open, the extension watches that tab for one of the hub's own requests and copies two of its request headers: the access token and the client name. If none appears within about eight seconds, it loads the hub's active-selling page in that same tab once and watches for at most twelve seconds more. It reads no request body and no response, makes no request of its own beyond that one page load, and removes its watcher as soon as it has both values or the time is up. The two values are sent to Consigner with the capture and are never kept in extension storage. If no hub tab is open or no token is found, nothing is sent; the extension opens the seller hub in a tab, and once you have signed in there it reopens its popup and finishes the same capture without another click (at most three times per request). It never types or reads your password. DEVICE IDENTIFIER For Poizon, the extension also reads one value with the session: the deviceId that the page keeps in that tab's local storage. It reads nothing else from the page for this and never stores the value in the extension. SALES SYNC When you ask Consigner, the extension reads your own sales list in your open marketplace tab, using that tab's existing sign-in, and sends Consigner only the order facts your books need: order and item IDs, status, sale time, quantity and sale price. Today the source implements this read for the seller hub described above only, and it does not read tracking numbers or payouts. Sales sync never sends your password, cookies or sign-in token, never reads messages and never changes a sale or listing. Scheduled sales sync is not active: the extension creates no sales-sync alarm and reads sales only when you ask. PAIR THIS BROWSER Consigner can make the marketplace changes you ask for (list, reprice or delist an item, or read your listings, orders and offers) from your own browser. To allow it, start pairing in Consigner and confirm the account shown in the extension popup with "Pair this browser". A paired browser checks in with your Consigner workspace every ten seconds while Chrome is running (every two seconds for two minutes after an action arrives, because actions come in batches) and receives only actions queued for your own Consigner account. Each action is one request run inside your own signed-in marketplace tab, only on a marketplace you have granted, after the extension confirms that tab is signed in to the account you connected. Seller-hub actions run only in a hub tab you already have open. Otherwise, if no tab is open, the extension opens one pinned background tab on that marketplace and closes it when the action ends. The marketplace's answer to that one request goes back only to your Consigner workspace. A paired browser also reports the outcome of each capture as a status code (for example "not-logged-in"), never a cookie, token, address or count. To stop, revoke this browser in Consigner's settings; the extension then forgets its device token. KEEP SIGNED IN On a paired browser you can tick "Keep StockX signed in automatically" in the popup. While it is ticked, every fifteen minutes the extension asks Consigner whether the seller-hub token needs refreshing. When it does, the extension reads the access token and client name from a hub tab you already have open, exactly as described under SELLER-HUB TOKEN, and sends them to Consigner. It never opens a new tab or popup for this and never reloads the tab you are looking at; if a hub tab in the background shows no token, it may load the active-selling page in that tab once. Untick the box to stop; nothing runs while it is off. SESSION HEALTH On a paired browser, Consigner checks that each marketplace you connected is still signed in, at the interval your Consigner workspace sets (five minutes by default). For each marketplace it runs one read-only request that asks the marketplace which account is signed in: inside your open tab of that marketplace, which is never navigated or reloaded, or, if none is open, in a background tab it opens and closes again (at most once every ten minutes per marketplace). It sends Consigner only the check's id and one outcome word, such as signed in or signed out, never a cookie, token, header or page content, and Consigner shows "Needs sign-in" for a marketplace that signed you out. For a marketplace whose site renews its own sign-in when it is opened, the extension may then open that site once in a background tab (at most once every ten minutes per marketplace) and check again. When your own tab of a marketplace that signed you out finishes loading, it checks again right away, so the notice clears as soon as you sign back in. It never types a password, clicks a sign-in button or opens a popup for this. REFRESHING A SESSION If Consigner asks for a fresh session (fo…