Is it allowed to auto-monitor Kleinanzeigen? An honest look at the ToS and robots.txt
If you've ever thought about pointing a bot, a script, or a hosted agent at an eBay Kleinanzeigen search, you've probably also had the quiet second thought: am I actually allowed to do this? It's the right question to ask, and most tools that would happily sell you a "Kleinanzeigen bot" answer it by not answering it at all.
So here's a straight version. It won't give you a tidy yes/no, because there isn't one — but it will tell you where the real lines are, what the platform actually says, and how to stay on the reasonable side of a genuinely murky topic. One disclaimer up front: I'm a reseller who reads terms of service, not a lawyer, and none of this is legal advice. If you're operating at scale or commercially, talk to someone who is.
What the terms of use actually say
Start with the source. Kleinanzeigen's terms of use (Nutzungsbedingungen) contain the kind of clause almost every large site has: you may not use crawlers, spiders, scrapers, or other automated mechanisms to access the service or collect its content without express written permission. That's the plain reading, and it's not ambiguous. Automated access to fetch and process listings is not something the platform invites, and it reserves the right to say no.
That single sentence does a lot of work, so be precise about what it is and isn't. It's a contractual term between you and the platform: breaking it primarily risks your access — rate-limiting, a blocked IP, a closed account — not a courtroom. But it is not a criminal statute; "against the terms of use" and "illegal" are different claims people constantly blur together. Both matter, and neither of them is "it's totally fine, ignore it."
robots.txt: a signal, not a law
The other thing people point to is robots.txt — the file at the root of most sites that tells automated clients
which paths they're asked not to crawl. Treat it as exactly that: a request from the site operator, widely
respected as a norm of good behaviour, but not itself a law you're breaking by ignoring. The practical ethic
behind it matters more than the specific paths: don't hammer the server, throttle yourself, and don't treat
someone else's infrastructure as a free unlimited API. Requests spaced a second or two apart rather than fired in
a tight loop is the baseline courtesy.
"Gray area" — what that phrase actually hides
You'll see automated monitoring described as a "legal gray area" everywhere, including in my own writing. That's honest, but it's vague, so let me unpack the three separate questions it smears together:
- Is it against the terms of use? For access-and-collect automation, essentially yes, as above.
- Is it illegal? This is genuinely unsettled. In the EU and Germany, scraping of publicly visible data has been litigated repeatedly with results that turn on the specifics — how the data was accessed, whether technical protections were bypassed, whether personal data was involved, what it was used for. There's no clean blanket ruling that says "monitoring public classified listings is a crime," and there's no clean one saying it's always fine either.
- Is it a data-protection problem? The one flippers underrate. A listing can contain personal data — a seller's name, sometimes a location. Under the GDPR (DSGVO), systematically collecting and storing that is a separate obligation from the ToS question, and it's the part most likely to bite if you build something that retains it.
"Gray area" is true. But it means "several different unsettled questions," not "a wink that says go ahead."
Where the real lines are
If you take one thing from this piece, take this: the risk isn't uniform. There's a big difference between the kinds of automation people lump together, and knowing which side you're on is most of staying reasonable.
Clearly over the line:
- Acting automatically — auto-bidding, auto-buying, or committing to a purchase without a human deciding.
- Mass-messaging sellers with bot-sent inquiries. This is spam, it's what platforms police hardest, and it's the fastest way to get an account nuked (and to make sellers' lives worse).
- Bulk-harvesting and storing sellers' personal data, or repurposing scraped content — that's where the ToS problem and the GDPR problem stack on top of each other.
- Hammering the server with aggressive, high-frequency requests that degrade the service for everyone.
Much more defensible, though still inside the ToS gray zone:
- A read-only notifier that checks a single search at human-like intervals and tells you when something new appears, so you can look and you can decide whether to message. No automated action, no mass contact, no personal-data warehouse — just a faster version of hitting refresh yourself.
That's the distinction that matters. A notifier that keeps a human in every decision, polls politely, and doesn't retain personal data is a very different animal from an auto-buyer scraping the whole site. Both get called "a Kleinanzeigen bot"; they are not the same thing, and pretending otherwise is how this conversation gets dumb.
What "responsible" actually looks like in practice
If you do use any monitor — mine or anyone's, or your own script — a few habits keep you on the reasonable side:
- Poll at human intervals. Once a minute is already far faster than a person and plenty for being first. Sub-second hammering buys you almost nothing (the platform's own indexing lag dominates) and is exactly the behaviour that gets IPs blocked. Slower is not just safer, it's barely worse.
- Watch a search you'd actually watch. One or a handful of specific searches is realistic human usage; a thousand parallel searches is not. And don't store people — you need "new matching listing, yes/no," not a growing archive of sellers' names and locations. Keep only what a notification needs.
- Never automate contact or purchase. Keep yourself in the loop for every message and every buy. The moment a bot talks to a seller, you've left "notifier" and entered "spam." And if your access gets throttled, that's the platform exercising the right it reserved — back off; don't build an arms race of proxies to evade it.
None of that makes automated monitoring officially blessed. It makes it measured — the difference between a tool that quietly helps you not miss a listing and one that abuses a platform you depend on.
How this shapes the tool I built
I run a small monitor for this myself, so let me hold it to the same standard. It's an AI agent that watches a single eBay Kleinanzeigen search and sends a Discord ping when a new matching listing appears — about once a minute on the paid tier, every 15 minutes free. Deliberately, it only notifies: it never bids, buys, or messages a seller. You get the ping, open the listing, decide, and write the seller yourself. It reads each listing's text (title, description, price) to filter with rules you write, via Google's Gemini with your own key — it isn't building a database of people, just checking a search the way you would, more often.
I won't tell you that makes it officially sanctioned — it doesn't, and automated access sits in the ToS gray area this whole piece is about. What I can say is it's built for the defensible side of every line above: read-only, human-in-the-loop, polite intervals, no personal-data hoard. It's the only standard that lets you use this kind of tool without lying to yourself about it.
The takeaway
"Is it allowed?" doesn't have a clean answer, and anyone who gives you one is selling something. The terms of use say no to automated access without permission; the law is genuinely unsettled; the data-protection angle is real and underrated. What you can control is which side of the obvious lines you stand on. A read-only notifier that keeps you deciding, polls politely, and forgets what it doesn't need is a defensible workaround. An auto-buying, mass-messaging, data-hoarding scraper is not.
The notifier described above is Schnappalarm — start free. It watches one Kleinanzeigen search, filters new listings with rules you write, and pings your Discord — read-only, no auto-buying or messaging, bring your own Gemini key. Kleinanzeigen-only, Discord-only, text-only. Not legal advice; automated monitoring sits in a ToS gray area — use it measuredly.