What we read, what we keep, what we don't keep

In one paragraph

You paste an Etsy listing URL. Our server fetches that public page from Etsy with a SellerMind-identifying User-Agent, parses the title, tags, description, and image stats, sends a compact summary to DeepSeek (deepseek.com) for scoring, and returns you a score + 3 prioritized fixes + an optional PDF. We don't require an email, account, or any payment. We don't store your listing content beyond a 6-hour cache of the audit JSON output (keyed on a hash of the URL).

1. Data controller & contact

Operator: Haimo, founder of TheSellerMind (indie hacker, single-person team).
Email: [email protected]
Postal address: available on request.

2. What we collect when you use this tool

• The Etsy listing URL you paste (kept in volatile RAM during the audit; a SHA-256 hash of the URL is the cache key for 6 hours).
• Public content of that listing fetched from Etsy: title, tags (where available), description, image count, image alt-text coverage. We do NOT store this beyond the request lifecycle.
• A SHA-256 hash of your IP address (first 12 hex chars) is used to enforce the 5-audit-per-day rate limit. The plaintext IP is never written to storage.
• Anonymised request logs (timestamp, status code, score bucket, cached y/n, latency). No PII.

3. Where your data goes

• DeepSeek (api.deepseek.com) — receives the parsed listing summary for scoring. DeepSeek processes data in mainland China; transfer relies on the EU-China SCC (Module 2). DeepSeek states it does not use API requests to train its models. See their policy.
• Etsy.com — receives our server's outbound fetch request (your IP is NOT forwarded to Etsy; the fetch comes from our Vercel function).
• Upstash Redis (US region) — stores rate-limit counters and the 6-hour audit cache. Keys are hashed; values are score JSON only.
• Vercel (US region) — hosts the server function and keeps standard request logs for ~14 days.

We do NOT share your data with any other third party. No ad networks, no retargeting pixels, no email-marketing platform.

4. Lawful basis (EU/UK)

Art.6(1)(b) GDPR — performance of a service you requested. We process the URL solely to deliver the audit you asked for.

5. How long we keep it

• Listing content: 0 seconds beyond the request lifecycle.
• Audit JSON output (cached for fast re-fetch): 6 hours, then auto-purged.
• Hashed-IP rate-limit counters: 24 hours.
• Anonymised Vercel logs: ~14 days.

6. Your rights

Because we don't hold an account-linked record about you, most subject rights (access, erasure, portability) are moot — there's nothing to retrieve. You can still email [email protected] with any concern; we'll respond within 30 days. EU/UK users can also lodge a complaint with their national supervisory authority.

7. Etsy ToS posture

We only read public listings you actively paste into the tool. We do not connect to your Etsy account, we do not scrape stores, and we identify ourselves to Etsy with a clear User-Agent (SellerMindAudit/1.0) and a contact email. Repeat audits of the same URL within 6 hours are served from cache to minimise load on Etsy.

Back to the Etsy SEO checker.