개인정보처리방침

1. Etsy permissions we request

When you connect your Etsy account, the app requests only the two OAuth scopes below. Both are read-only; the app cannot change your listings, orders, shop settings, or payment details. Connecting uses Etsy’s OAuth 2.0 flow with PKCE, and your Etsy password is never shared with the app or the developer.

2. Information we process and why

Etsy account and shop information

Etsy user ID, shop ID, shop name, currency, shop URL, shop icon URL, number of active listings, and lifetime sales count — used to show the connected shop and to tell a widget which shop to refresh in the background.

Order data

Order number, order time, status, grand total, taxes, refunds, ordered items (listing ID, title, quantity, price), and buyer country — used only to calculate and display sales, orders, items, and average order value by period, daily trends, top listings, and recent orders in the app and widgets. Etsy’s order responses may also contain details such as the buyer’s name or shipping address; the app does not store or display them.

Authentication data

Etsy OAuth access and refresh tokens — used only to call the Etsy API.

Subscription information

Your Sales Widget Pro plan (monthly or yearly), its purchase, renewal, expiration, cancellation, and refund status, purchase time, and transaction identifiers (App Store transaction ID, Google Play purchase token), as reported to the device by the App Store or Google Play — used only to check whether you have Pro and to restore purchases. Payment details such as card numbers, payment methods, and billing addresses are handled by Apple and Google; neither the app nor the developer receives them.

App settings

Theme, language, default period, hide-amounts, and your usage analytics and error report choice — used to make the app behave the way you want.

The app does not access any other personal information such as contacts, photos, precise location, or payment methods.

3. Where data is stored, and the Etsy API relay

• iOS: Etsy tokens are stored in the operating system Keychain (an App Group Keychain item shared by the app and its widgets). The widget sales summary and widget configuration (shop ID, name, and currency, language, time zone) are stored in App Group shared storage (UserDefaults); app settings and the sales data cache are stored in the app’s private storage.
• Android: Etsy tokens are encrypted (AES-256-GCM) with a key held in the Android Keystore and stored in the app’s private SharedPreferences. The widget sales summary and widget configuration are stored in the app’s private SharedPreferences; app settings and the sales data cache are stored in the app’s private storage.
• Subscription status: the app checks it directly with the App Store or Google Play from your device and stores it on the device so the app and widgets know whether to unlock Pro. Subscription status and transaction identifiers are never sent to a developer server.
• To prevent abuse, the relay counts requests per IP address. That count is used only briefly inside Cloudflare’s rate limiting and is not stored.
• The developer cannot see your sales data or Etsy account information, and never sells or rents it or uses it for marketing, credit decisions, or training AI or machine-learning models.

4. How we treat Etsy data

The app follows the Etsy API Terms of Use and handles data received from Etsy only as follows.

• Etsy data is used only to show you your own shop’s sales in the app and in widgets.
• Etsy data is never sent to analytics or crash reporting services (including Sentry), to Apple or Google as payment processors, or to any other third party.
• It is never used for marketing, retargeting, tracking, or profiling.
• It is never sold, and never used to determine creditworthiness or for lending purposes.
• No human reads it. The data lives only on your device, so the developer has no access to it.
• It is never used to develop, improve, or train generalized AI or machine-learning models.

5. Third-party services

The app uses the services below to operate and improve. Except for Etsy itself, none of them receive Etsy data (shop details, orders, sales, or tokens).

Each provider handles information under its own policy: Etsy Privacy Policy, Apple Privacy Policy, Google Privacy Policy, Sentry Privacy Policy, Expo Privacy Policy.

6. International transfers

Etsy requests travel to Etsy, Inc. in the United States. They pass through Cloudflare, Inc. data centers, which relay them without storing them. The operational alerts in section 5 pass through the developer’s site (etsywidget.leed.at, hosted by Cloudflare) to the developer’s Slack workspace (Slack Technologies, LLC) in the United States and other countries where they operate, and are kept for up to one year; daily totals per platform are stored with Cloudflare for 366 days. If you subscribe, purchase requests and subscription status checks go through your device’s App Store or Google Play to Apple Inc. or Google LLC in the United States and other countries where they operate, under their policies. Error reports go to Functional Software, Inc. (Sentry) in the United States for up to 90 days, and update checks to 650 Industries, Inc. (Expo) in the United States. To avoid these transfers, turn off usage analytics and error reports in Settings, use sample mode without subscribing, or disconnect Etsy and delete the app.

7. Retention and deletion

Information on your device is kept until you disconnect Etsy or delete the app. Because no server collects your sales data, the developer keeps no copy of your Etsy data.

• Disconnect: disconnecting Etsy in the app’s Settings deletes the tokens, shop details, sales cache, and widget data stored on your device, and widgets switch to their not-connected state.
• Revoke Etsy access: Etsy does not offer a way for apps to revoke tokens directly. Remove Sales Widget at https://www.etsy.com/your/account/apps and any remaining token stops working.
• Delete the app: data stored by the app and its widgets is deleted with it. On iOS, Keychain items can remain after the app is deleted, so we recommend disconnecting or revoking access first.
• Etsy API relay: it stores no requests, responses, or tokens, so there is nothing to delete.
• Subscription: the subscription status stored on your device is deleted with the app. Purchase and billing records are kept by Apple or Google under their own policies; the developer keeps no copy. Deleting the app does not cancel your subscription, so cancel it in your store’s subscription settings.
• Sentry: error reports are deleted after up to 90 days under Sentry’s retention policy.
• Operational alerts: install, launch, and connection alerts in the developer’s Slack workspace are deleted after up to one year. While relaying them, the developer’s site keeps only daily totals per platform (for example, how many devices opened the app that day or used each app version), and the totals contain nothing that identifies an individual device or person. These totals are deleted after 366 days. Push notification tokens are deleted when an app deletion is detected or when you turn off usage analytics and error reports in Settings.
• Support email: emails you send are kept only as long as needed to answer and follow up, then deleted.

8. Children

The app is not directed to children under 13 (under 14 in Korea, or the age set by local law), and we do not knowingly collect personal information from children. If you learn that a child’s information has been processed, contact me@leed.at and we will act promptly.

9. Your rights

You can ask to access, correct, delete, or stop the processing of your information at any time. Most information the app handles exists only on your device, so you can review it in the app and remove it by disconnecting or deleting the app. You can turn off usage analytics and error reports in Settings at any time. Your subscription and billing history are available in your App Store or Google Play account settings. For any other request, email me@leed.at and we will respond promptly.

10. Security

• All communication is encrypted with HTTPS (TLS).
• Connecting Etsy uses OAuth 2.0 with PKCE, and tokens are protected by the iOS Keychain and the Android Keystore.
• Only the minimum read-only scopes needed are requested.
• The secret part of the Etsy API key is never shipped in the app; it exists only as a secret setting of the relay. The relay forwards only the allowed Etsy endpoints, limits request rates, and does not log request or response contents.
• Sales data is never collected on a developer server.
• Subscription payments are processed by Apple and Google; payment details never pass through the app or the developer.

11. Changes to this policy

If we change this policy, we will announce it on this page and in the app at least 7 days before it takes effect (30 days for changes that are unfavorable to you). The effective date is shown at the top of this page.

12. Contact

• Privacy contact: leed.at
• Email: me@leed.at
• Website: https://etsywidget.leed.at