Consigner Connect

Securely captures marketplace sessions for validation by Consigner.

Consigner Connect links Chrome to your private Consigner workspace. Every step starts with you: you begin it in your Consigner portal and confirm it in this extension's own popup. 1. Installation check - the extension answers a one-time, random challenge from your Consigner portal so Consigner knows the add-on is present. No account data and no cookies are read for this step. 2. Session connect - when you start a marketplace connection inside Consigner and click "Grant permission & capture" in this extension's popup, the extension reads the cookies that one marketplace has set in the browser where you are already signed in - the whole cookie jar for that marketplace's own domains, because that is what carries the signed-in session - and sends them over HTTPS to your Consigner workspace so Consigner can maintain the connection for you. Cookies are sent only to Consigner and are never returned to any web page. 3. Listing-action recording (added in 1.4) - teaching Consigner how one of your marketplaces works normally means someone reverse-engineering it. Instead, you can click "Grant permission & start observing" and then perform the action once yourself - list an item, change a price, remove a listing, or pull in your listings, orders or offers. While recording, the extension watches only that one marketplace's own requests for that one action (the write requests behind a listing change, or the read requests behind an import) and reports their shape: the method, the address pattern, the names of the headers involved, a body outline in which the values you typed are replaced by placeholders, and an outline of the response - its status, its content type, and the names and types of its fields. It records no cookies, no authorization headers and no response content. The only literals kept are fixed choices that carry no personal information (true, false, null, and short lowercase option codes such as "new" or "usd"), plus four harmless request headers (accept, accept-language, content-type, x-requested-with); anything free-text, numeric, long or credential-shaped is always a placeholder. Recording stops automatically once the action is done, after twenty requests, or after fifteen minutes - and you can discard everything before it is sent. Recording is what the "scripting" permission is for: after you grant it, a temporary observer is placed on the one marketplace you are recording, and it is removed as soon as recording ends. It is never placed ambiently, and never on any site outside the marketplace you chose. Marketplace access is optional and requested one marketplace at a time, from the popup's permission button - never for all sites. Passwords and two-factor codes are entered only on the marketplace's own website - the extension never sees them. Consigner never moves money, never changes passwords, and never reads DMs or other direct messages. You can disconnect any marketplace in one tap from Consigner's connection controls; disconnecting revokes the stored session. Chrome always asks you to complete extension installation. A web page cannot silently install Consigner Connect.