Privacy Policy
Last updated 4 September 2026
This page says exactly what Stallsy stores and for how long. The short version: your shop data, the costs you enter, and nothing about your buyers.
What Stallsy stores
| Data | Why | How long |
|---|---|---|
| Your email address | To sign you in and to reach you about your account | Until you close your account |
| Your Etsy listings — title, description, tags, price, quantity, images, views, favourites | To show them, score them, and edit them when you ask | Until you disconnect the shop |
| Your orders and payment ledger — amounts, fees, dates | To calculate real net profit | Until you disconnect the shop |
| Costs you enter — material, labour, shipping | Profit cannot be calculated without them | Until you delete them |
| A record of every change Stallsy made to your listings, with the previous value | So you can undo it, and so you can see who changed what | Until you disconnect the shop |
| Your Etsy API credentials | To act on your shop at your instruction | Deleted immediately when you disconnect |
What Stallsy deliberately does not store
Stallsy reads your Etsy orders to work out revenue and fees. It does not store buyer names, buyer email addresses, shipping addresses or phone numbers. These are not needed to calculate profit, and data that is never stored cannot leak.
Stallsy does not sell your data, and does not share it with advertisers or data brokers.
How your credentials are protected
Etsy credentials and access tokens are encrypted with AES-256-GCM before they reach the database. Each record is encrypted with its own key, and that key is itself encrypted with a master key that is not stored in the database. Each record is bound to its own shop, so a record cannot be moved between accounts.
When you disconnect a shop, these records are deleted — not marked inactive.
Etsy data freshness
Etsy’s API terms require that listing information is not displayed more than six hours older than it is on Etsy. Stallsy refreshes within that window, and shows you when a figure was last synced.
Cookies
Stallsy sets two cookies: one to keep you signed in, and one to protect against cross-site request forgery. There are no advertising or analytics cookies and no third-party trackers.
Who else processes your data
- Etsy — the source of your shop data, under your own Etsy account.
- Our hosting and database provider — stores the data described above.
- Our email provider — sends sign-in links and account notices.
No one else. If that ever changes, this page changes first.
Your rights
- See it. Everything Stallsy holds about your shop is visible in the application.
- Delete it. Disconnecting a shop deletes its credentials immediately and its data. Closing your account deletes everything.
- Take it. Ask via Support and we will export your data.
If something goes wrong
If there is a data breach affecting Etsy data, we notify Etsy at dpo@etsy.com within 24 hours of becoming aware of it, and we notify affected users.
THIS APPLICATION IS SOLELY PROVIDED BY STALLSY. YOU ACKNOWLEDGE THAT ETSY, INC. AND ITS AFFILIATES ARE NOT THE APPLICATION DEVELOPER AND HAVE NO RESPONSIBILITY OR LIABILITY WITH RESPECT TO THIS APPLICATION.
Contact
Privacy questions: see Support.