Marketplace approvals, buyer data rules, incidents and security controls

Compliance

Account deletion notifications

eBay keeps production keys off until this address answers its challenge. When a buyer closes their eBay account, eBay calls it and their data is removed from every company straight away.

Endpoint, register exactly this in the eBay developer portal

https://cd.shapeventures.net/webhooks/ebay/account-deletion

Verification token

Set from EBAY_VERIFICATION_TOKEN

GET with challenge_code answers with a SHA-256 hash of code, token and endpoint.
POST with a deletion notice removes that buyer’s data and replies 204.

Challenge test

Calls the endpoint the way eBay does and checks the answer.