Privacy
A list of columns rather than a page of assurances, because the columns are the part that is actually true.
Nothing here records what you are allergic to, or that you are allergic to anything at all. Your bar is a filter setting with two values. It is not a health record, it is not shared, and it is never sent anywhere.
About you
| Field | Where it comes from |
|---|---|
| Email address | Google sign-in. The only thing requested from Google is your email
address — scope openid email. No profile, no name, no photo, no
contacts. |
| Your bar | Your setting: safe or caution. |
| Whether mail is on | Your setting. |
What you watch and keep
| Field | Note |
|---|---|
| Search terms you watch | Typed by you. Sent to Etsy as a search, with nothing identifying you attached. |
| How that search looked last time | Two counts: how many listings were read, and how many cleared your bar. Current values, overwritten daily. Not a series. |
| Kept listings: id, title, link, price | Public Etsy listing data. |
| The materials text as it was when you saved it | Deliberately allowed to go stale. It is the only string here not refreshed on sight, because comparing today's wording against it is the entire product. It is the seller's public text, not yours. |
| The verdict last written to you about | One word per kept listing. Stops the same warning going out twice. |
| Listing ids already mentioned to you | Ids only — no titles, no prices, no verdicts — so a standing search does not name the same find twice. Pruned to the most recent few hundred per search, so it cannot grow into a record of everything you were ever shown. |
There is no history table. No verdict series, no price series, nothing that could be assembled into a record of what you looked at over time. Etsy's API terms limit how long listing data may be held, and this app needs exactly one previous value — the wording — to do its job.
Your Etsy account
Not touched, not asked for, not seen. Public listing data is read with an application key, exactly as any visitor to the site could. There is no Etsy sign-in, no permission to grant, and nothing to revoke.
Who else sees it
Nobody. Nothing is sold, shared, or handed to an analytics service. There are no third-party
scripts on any page — the site sends no JavaScript at all and its content security policy is
script-src 'none', so it could not run one if it wanted to. There are no tracking
cookies; the single cookie is a signed session so the site knows it is you.
The app runs on Cloudflare Workers and stores its data in Cloudflare D1. Email goes through Cloudflare's email service. Google receives a sign-in request. Etsy receives the searches and listing lookups described in What it reads.
Deleting all of it
Delete everything on your account page removes every watch, everything kept, and your email address in one transaction. There is no soft-delete and no grace period.
Questions, including a request for a copy of what is held: Contact.