Margin Check · Privacy
27 October 2026 · English disclosure
Offerboxer Margin Check provides insights for bol sellers. Platform accounts and billing have their own terms. Contact Offerboxer.
On your device. Opening the popup reads the active supported bol page: product title, EAN when available, current displayed price, public seller/delivery/product signals; the Grabber reads only currently loaded search/category cards. Product IDs without an EAN remain unresolved until you open the product. The optional bol-page strip reads only its loaded product page, stays inside a Shadow DOM and makes no API or analytics requests. Its event-only worker opens the native popup after a click. There is no continuous crawler, pagination fetcher, advertising tracker, cookie/password/order reader, unrelated-tab reader or stored browsing-history feed. A short-lived local navigation instruction carries only a tab ID, tool and time, and is consumed by the popup.
Your purchase cost stays on this device unless you explicitly include it in a monitoring confirmation. Purchase costs, editable VAT/logistics assumptions, settings, drafts and the local saved list stay in Chrome storage. They are not an encrypted vault: a shared browser profile shares local inputs. Market observations cached for the saved list are bound to the current connection. Clearing local data does not delete cloud records or withdraw server consent; own-data controls are separate.
Your bol connection. Read-only requests send EAN, selected NL/BE market, condition NEW and the exact public selling price for a commission quote, plus the scoped connection credential and extension ID. Search Volume additionally sends the chosen search term and market. Offerboxer uses your company's connected bol account; API keys remain on the server. Competitor display names/ratings and price stars are read through that account and cached briefly for it, not borrowed from another seller's private API cache. Offer snapshots/enrichments cache for 15 minutes; search results for 24 hours. The selected costs stay in the browser during calculation, Coach comparisons and per-price break-even probing. No cost is sent to calculate a bol commission. Related search totals are not sales forecasts.
Private monitoring and optional costs. Account connection alone does not authorize research, cost upload or analytics. Each optional purpose is chosen on the authenticated Offerboxer connection page; existing read-only grants gain no new rights. A monitoring request requires a suitable Offerboxer plan, active research access and a separate confirmation naming the selected EANs, markets and titles. The optional cost checkbox starts unchecked, is available only for a single identified product and previews the selected purchase estimate, VAT and logistics before sending. Version 0.12 disables legacy unmonitored cost-upload defaults, including old device preferences. Product-only research saving remains product-only. Existing local products/costs are not bulk-uploaded.
Confirmed private monitoring stores one observed official Buy Box price/seller sample per monitored product and UTC day, with the source observation time, for up to 30 days. It does not fabricate prior history or pool data between sellers. The bounded monitoring task must be enabled separately; inactive tasks, expired/revoked grants, withdrawn research access, lost membership or missing plan entitlement pause sampling. Deleting private research also deletes its associated samples. Alerts and repricing stay in Offerboxer; this extension does not change bol offers, prices or stock.
Selected cloud cost estimates are encrypted at rest and private to their creating user/company/account. They do not change actual product costs, ERP purchases or repricing rules. A previously authorized cloud estimate can restore into an empty draft; replacing an existing local value needs an explicit action. An existing cloud estimate is not silently overwritten by a monitoring request. No company-wide cost sharing or cross-company cost intelligence is provided.
Optional usage analytics. The existing separate choice records an allowlist of feature events: popup use, logical analysis completion, comparison, save/sync and failure outcomes. Events contain random event/check identifiers, extension version, selected market, language, coarse duration and outcome. They contain no EAN, search term, title, URL, retailer ID, cost, margin, credential, email or raw exception. The account supplies restricted user/company association to measure returning use; this is pseudonymous, not anonymous. Staff see aggregate reporting, not a private product/cost feed. Declining analytics does not disable local calculation or read-only bol access.
Events queue only after the relevant choice, at most 100 events/24 hours, delivered while the popup is open. Raw server usage expires after 30 days; daily usage summaries and identifier-free service counters after 90 days. Reporting pauses unless its apply-mode retention task is active and caught up within 48 hours. Necessary service counters contain endpoint, status, version, market and latency bucket, without user/account/product identifiers. Ordinary hosting/security logs may contain IP address, time and EAN/search-term-bearing request URLs under the platform's operational retention policy; they are not a research-history feature. Authorization headers and financial bodies must not be logged. Error responses are sanitized.
Private research/estimates remain until deleted or account closure applies. Consent receipts preserve minimum evidence of purpose/version/decision/time. Deleted records retain minimal identity/revision markers to stop stale clients restoring them; titles and cost payloads are removed. Backups follow hosting policy; no unverified backup-expiry deadline is promised.
Use the popup's data controls or your account data page to export private records, disable a purpose and delete cloud records. Own-data rights remain available independently of optional switches or paid research-page access. Cloud deletion does not remotely erase other devices' local data. Turning analytics off deletes linked server usage/daily summaries. Disconnect removes the local credential and attempts server revocation; complete withdrawal in Offerboxer if offline. Data is not sold or reused for advertising, lending or unrelated purposes.