Consigner Connect

Securely captures marketplace sessions for validation by Consigner.

Consigner Connect links Chrome to your own Consigner workspace, so Consigner can connect the resale marketplace accounts you choose and work with them for you. Nothing is captured, recorded or paired until you confirm it in the extension's popup. INSTALL CHECK When your Consigner portal asks, the extension answers a one-time random challenge so Consigner knows it is installed. No cookies or account data are read for this step. CONNECT A MARKETPLACE Start a connection in Consigner, then click "Grant permission & capture" in the popup. Chrome first asks you to allow access to that one marketplace if you have not already. The extension then reads the cookies that marketplace has set in this browser, which are what keep you signed in, and sends the unexpired ones over HTTPS to your Consigner workspace. They go only to Consigner and are never returned to any web page. Each marketplace Consigner works with is described under MARKETPLACES below; a marketplace that offers its own sign-in to apps connects there and does not use this extension. MARKETPLACES Connect Whatnot and Consigner prepares and manages the items you sell there, while you run the live show itself inside that app. On a paired browser you can tick "Keep StockX signed in automatically" and Consigner keeps that seller-hub session fresh, lists, reprices and delists there for you and, when you ask, reads your own sales from the hub. Connect Alias (GOAT), where the SKU and size identify the product, and Consigner lists and manages your items there from your own browser. Connect Grailed and Consigner drafts each listing from your item's title, condition, measurements and photos, keeps that draft for your review and manages it there once it is live. Connect Poshmark and Consigner prepares each listing from your item and never publishes it there without your approval. Connect Mercari and Consigner keeps your item as the source of truth and adapts a listing there for your review. Connect Poizon, where the product and size identify what is listed, and Consigner lists and manages your items there; it is the one marketplace whose page deviceId the extension also reads, as described under DEVICE IDENTIFIER. Connect Vestiaire Collective and Consigner prepares each listing as a draft that the marketplace reviews before it goes live, then manages it for you. Connect Depop and Consigner lists and manages your items there from your own signed-in browser. eBay connects through its own sign-in inside Consigner, not through this extension, and Consigner then lists, reprices and books your sales there. Shopify connects through its own sign-in inside Consigner as well, and Consigner creates destination-ready drafts from your items and keeps variants tied to your inventory there. SELLER-HUB TOKEN The seller hub named under MARKETPLACES signs its own requests with a short-lived access token. When you connect it with a seller-hub tab open, the extension watches that tab for one of the hub's own requests and copies two of its request headers: the access token and the client name. If none appears within about eight seconds, it loads the hub's active-selling page in that same tab once and watches for at most twelve seconds more. It reads no request body and no response, makes no request of its own beyond that one page load, and removes its watcher as soon as it has both values or the time is up. The two values are sent to Consigner with the capture and are never kept in extension storage. If no hub tab is open or no token is found, nothing is sent; the extension opens the seller hub in a tab, and once you have signed in there it reopens its popup and finishes the same capture without another click (at most three times per request). It never types or reads your password. DEVICE IDENTIFIER For the one marketplace that MARKETPLACES says uses it, the extension also reads one value with the session: the deviceId that the page keeps in that tab's local storage. It reads nothing else from the page for this and never stores the value in the extension. SALES SYNC When you ask Consigner, the extension reads your own sales list in your open marketplace tab, using that tab's existing sign-in, and sends Consigner only the order facts your books need: order and item IDs, status, sale time, quantity and sale price. Today the source implements this read for the seller hub described above only, and it does not read tracking numbers or payouts. Sales sync never sends your password, cookies or sign-in token, never reads messages and never changes a sale or listing. Scheduled sales sync is not active: the extension creates no sales-sync alarm and reads sales only when you ask. PAIR THIS BROWSER Consigner can make the marketplace changes you ask for (list, reprice or delist an item, or read your listings, orders and offers) from your own browser. To allow it, start pairing in Consigner and confirm the account shown in the extension popup with "Pair this browser". A paired browser checks in with your Consigner workspace every ten seconds while Chrome is running (every two seconds for two minutes after an action arrives, because actions come in batches) and receives only actions queued for your own Consigner account. Each action is one request run inside your own signed-in marketplace tab, only on a marketplace you have granted, after the extension confirms that tab is signed in to the account you connected. Seller-hub actions run only in a hub tab you already have open. Otherwise, if no tab is open, the extension opens one pinned background tab on that marketplace and closes it when the action ends. The marketplace's answer to that one request goes back only to your Consigner workspace. A paired browser also reports the outcome of each capture as a status code (for example "not-logged-in"), never a cookie, token, address or count. To stop, revoke this browser in Consigner's settings; the extension then forgets its device token. KEEP SIGNED IN On a paired browser you can turn on a separate keep-signed-in switch for each marketplace (the seller-hub switch is quoted under MARKETPLACES). Every one minute the extension asks Consigner whether a selected marketplace needs a fresh session. It reads current sign-in details only from a marketplace tab you already have open and sends them to Consigner for account verification. It never opens, reloads or navigates a tab for this refresh. For the seller hub, a token verified for the same account and tab may be reused from worker memory until one minute before it expires; closing the tab, leaving the page, turning off refresh or restarting the worker discards it. Untick a marketplace's box to stop its refresh; the others keep their own settings. SESSION HEALTH On a paired browser, Consigner checks that each marketplace you connected is still signed in, at the interval your Consigner workspace sets (one minute by default). For each marketplace it runs one read-only request that asks the marketplace which account is signed in: inside your open tab of that marketplace, which is never navigated or reloaded, or, if none is open, in a background tab it opens and closes again (at most once every ten minutes per marketplace). It sends Consigner only the check's id and one outcome word, such as signed in or signed out, never a cookie, token, header or page content, and Consigner shows "Needs sign-in" for a marketplace that signed you out. One marketplace's seller site sends anyone who is not signed in to its own sign-in page, so there a tab showing that page counts as signed out; only the tab's address is read for this. For a marketplace whose site renews its own sign-in when it is opened, the extension may then open that site once in a background tab (at most once every ten minutes per marketplace) and check again. When your own tab of a marketplace that signed you out finishes loading, it checks again right away, so the notice clears as soon as you sign back in. It never types a password, clicks a sign-in button or opens a popup for this. REFRESHING A SESSION If Consigner asks for a fresh session (for example when an access token is close to expiring), you confirm it in the popup with the same "Grant permission & capture" button and the same steps run again. Nothing is refreshed without your click. RECORDING AN ACTION If Consigner asks you to show it how an action works on a marketplace, you click "Grant permission & start observing" and perform the action once yourself: list an item, change a price, remove a listing, or load your listings, orders or offers. While recording, the extension keeps only the shape of that marketplace's own requests for the action: the method, the address with identifiers replaced by placeholders, the names of the request headers, an outline of the body in which values become placeholders, and the response status, content type and the names and types of its fields. It keeps no cookie, no authorization header value and no response values, and a record that still contains a credential-shaped string is refused whole. Recording ends by itself when a page goes three seconds without a new recorded request after recording one, when a page reaches twenty recorded requests, or when the fifteen-minute window Consigner opened for the recording closes; Send and Discard end it at once. At most twenty request shapes are kept, you see the list in the popup, and nothing is sent until you press Send; Discard throws it all away. WHAT IT NEVER DOES The extension never asks for your password or two-factor codes; you type those only on the marketplace's own website. It never creates, changes or deletes a cookie, sends what it collects only to Consigner, and never runs on a site you have not granted. Consigner never moves money, never changes passwords and never reads direct messages. You can disconnect any marketplace from Consigner's connection controls; disconnecting revokes the stored session. Chrome always asks you to complete installation; a web page cannot install Consigner Connect silently.