Privacy Policy

MeasureWorth is operated by Vincent Colombo, in Illinois, United States, who is the data controller for the information described on this page.

For anything on this page, including a deletion request, email support@measureworth.com.

Everything we hold falls into six groups.

• Your account. Your email address, a hash of your password (we never store the password itself), and whether your email has been verified.
• Your Etsy connection. Your Etsy user ID, your shop ID, and the access and refresh tokens Etsy issues when you authorize us. The tokens are encrypted before they are stored. We request four permissions and no others: read your listings, edit your listings, read your shop, and read your transactions.
• Your listings. For each listing: title, description, tags, category and attributes, price, state, image URLs and image facts such as how many there are and whether they carry alt text — plus the raw response Etsy returned, so a score can be recomputed without asking Etsy again.
• Your sales. For each paid transaction: the transaction and receipt IDs, which listing sold, quantity, amount, currency, and when it was paid. This is what the impact measurement runs on.
• Your changes. Every rewrite you apply, stored as the title, tags and description before and after, with the reason given and the scores at the time.
• Security and usage records. Sign-in sessions, which store a hash of your refresh token, when the session was created and when it was last used; records of security-relevant events such as a token being replayed; and, for each AI call, the model used, the token counts, and what it cost.

These are not omissions from the list above. They are things the software is built not to do, and you can hold us to them.

• Nothing about your buyers. We read paid transactions to measure whether a change sold more, and we store only the transaction and receipt IDs, the listing, the quantity, the amount, and the date. No buyer names, no shipping addresses, no buyer email addresses, no payment details. Etsy offers buyer email access as a separate permission; we do not request it.
• No tracking. There is no analytics, no advertising pixel, no session recording, and no third-party script of any kind in this web app.
• No IP addresses, and no device profile. We do not store the IP address you connect from — not in plain form and not hashed — and we do not store your browser's user-agent string or build any device fingerprint. Your address passes through our servers to answer the request and to apply rate limits, as it must for any website, and it is not written down.
• No borrowed or bought data. We do not scrape competitors' analytics, we do not buy keyword estimates, and we never ask for or use anyone's credentials but your own. Benchmarks come from listings Etsy already publishes openly.
• We do not sell your data. Not your listings, not your sales, not your email address — to anyone, for any price, ever.

Your account, listings, sales and changes are held to perform the service you signed up for: scoring your shop, generating rewrites, and measuring what each change was worth. The security and usage records are held on our legitimate interest in keeping accounts from being taken over and in knowing what our own costs are.

Three companies, each for one job.

• Etsy, Inc. We read your listings, shop and paid transactions through Etsy's API using the authorization you granted, and we write back only the changes you explicitly apply.
• Anthropic PBC, for generating listing rewrites. We send the listing text — title, description and tags — together with the problems our own rules found and any keywords being targeted. We do not send your sales data, anything about your buyers, your email address, or your listing images.
• Hostinger, which hosts the application and the database, in the United States.

We disclose information beyond this only if the law requires it of us.

One cookie, and it is strictly necessary: a first-party cookie named etsy_seo_refresh that keeps you signed in. It is HttpOnly, so scripts cannot read it, is restricted to the sign-in endpoints, is sent only from our own site, is marked Secure so browsers send it over HTTPS only, and expires after 30 days. Your short-lived access token is held in the page's memory and is gone when you close the tab.

We set no advertising, analytics or preference cookies, which is why there is no cookie banner.

Your account, sales, changes and benchmarks are kept for as long as your account is open, and are deleted when you ask us to delete your account. Your listings are the exception — they expire on their own schedule, described below.

Sessions end when you sign out or when a session is revoked. The short-lived state we create while connecting your Etsy shop expires after ten minutes, and an email verification link after 24 hours.

The cached copy of your listings expires on a schedule. It is refreshed every time we sync, we stop showing it once it is more than six hours old, and we delete it thirty days after its last sync. Syncing again brings it back. The six-hour figure is Etsy's own limit on displaying listing data; the thirty days is ours.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our holding it. If you are in the UK or the European Economic Area, those are your rights under the GDPR and you may also complain to your local supervisory authority; we extend the same handling to everyone regardless of where you live.

Deletion. Email support@measureworth.com and we will delete your account and the data listed on this page within 30 days. During the beta this is done by hand rather than by a button in the app, which is why it is an email address and not a promise of instant removal. We are building the self-serve version, along with automatic deletion of your Etsy data when you disconnect your shop.

One kind of record survives, and only one: security event records, so that an account takeover remains investigable after the account is gone. The link to you is severed — the account reference is emptied when your account is deleted — and these records never contained your listings, your sales, or your email address. Every other table, including your usage and cost history, is deleted with the account.

Disconnecting MeasureWorth from Etsy's side revokes our access immediately. It does not by itself delete what we already hold — email us for that.

MeasureWorth is a tool for people running a shop, and is not intended for anyone under 16. We do not knowingly collect their information.

If we change what we collect, who we send it to, or how long we keep it, we will change this page and its date, and email you before the change takes effect if it is a material one.

See also our Terms of Service.