What is stored
This is the privacy policy. It is a list of columns rather than a page of assurances, because the columns are the part that is actually true.
Your location is never asked for and never stored. What is kept is a place name you typed as a search term — the same kind of thing as a keyword. There is no map, no coordinates, no distance, no IP geolocation and nothing that could say where you are.
About you
| Field | Where it comes from |
|---|---|
| Email address | Google sign-in. The only thing requested from Google is your email
address — scope openid email. No profile, no name, no photo, no
contacts. |
| Whether mail is on | Your setting. |
About each place you watch
| Field | Note |
|---|---|
| What to look for, and the place | Typed by you. Both go to Etsy as search parameters, with nothing identifying you attached. |
| Ships-to country | Optional, and a two-letter code. |
| How many makers the last look found, and the state of the place | Current values, overwritten daily. Not a series. |
| The count the same search returns without the place | Measured once, when the watch is created, so the page can say what pinning it did. |
About the makers
| Field | Note |
|---|---|
| Shop id, shop name, shop link, and the day first seen | Public information. This is the whole record. |
No listings are stored. No prices, no titles, no images, no stock, no history of any of it. The app deals in “this maker exists and you had not heard of them”, and a shop id with a name is all that takes. The list is capped per place, so it cannot become an archive of a town’s sellers.
If you are a maker reading this
The only thing held about your shop is its name, its id and its public link — the same three things on the front of your shop page. Nothing about your listings, prices, sales or customers is read or kept. Nobody is told who follows a place, and there is no public list. If you would rather your shop were not surfaced this way, write to me and it will be excluded.
Your Etsy account
Not touched, not asked for, not seen. Public listing data is read with an application key, exactly as any visitor to Etsy could. There is no Etsy sign-in, no permission to grant and nothing to revoke.
Who else sees it
Nobody. Nothing is sold, shared or handed to an analytics service. There are no third-party
scripts on any page — the site sends no JavaScript at all, its content security policy is
script-src 'none', and it loads no images from anywhere. There are no tracking
cookies; the single cookie is a signed session so the site knows it is you.
The app runs on Cloudflare Workers and stores its data in Cloudflare D1. Email goes through Cloudflare’s email service. Google receives a sign-in request. Etsy receives one search per watched place per day.
Deleting all of it
Delete everything on your account page removes every place, every maker remembered and your email address in one transaction. There is no soft-delete and no grace period.
Questions, including a request for a copy of what is held: Post a question.