pigeon

What it keeps

This is the privacy policy. It is a list of columns rather than a page of assurances, because the columns are the part that is actually true.

About you

FieldWhere it comes from
Email addressGoogle sign-in. The only thing requested from Google is your email address — scope openid email. No profile, no name, no photo, no contacts.
Whether mail is on, and how oftenYour settings.
Your themesTyped by you. Sent to Etsy as searches, with nothing identifying you attached.

What it remembers about each theme

FieldNote
Listing ids you have been shownIds and a day number. Nothing else — no titles, no prices, no shops. This is the mechanism the whole app runs on: without it, every morning would show you the same forty things. Capped, so it cannot grow into a record of everything you have ever looked at.
How many results the last search returned, and how many were newTwo numbers, overwritten daily. Not a series.
Days since it last found anythingA counter. It is what decides that a theme has run out.

The finds

Title, link, price, shop name, favourite count and the day it was found — all public Etsy listing data. Kept as a scrapbook of the last thirty per theme, so you can come back to something you meant to look at properly. Anything you pin is never cleared out.

Your Etsy account

Not touched, not asked for, not seen. Public listing data is read with an application key, exactly as any visitor to Etsy could. There is no Etsy sign-in, no permission to grant and nothing to revoke. This app cannot tell whether you have ever bought anything.

No tracking of any kind

Nothing here records what you clicked, what you opened, or how long you looked at it — there is nowhere for that to be written. There are no third-party scripts on any page: the site sends no JavaScript at all and its content security policy is script-src 'none'. It loads no images from anywhere, including Etsy. There are no tracking cookies; the single cookie is a signed session so the site knows it is you.

The app runs on Cloudflare Workers and stores its data in Cloudflare D1. Email goes through Cloudflare’s email service. Google receives a sign-in request. Etsy receives one search per theme per day.

Deleting all of it

Delete everything on your account page removes every theme, every find, everything remembered as seen, and your email address in one transaction. There is no soft-delete and no grace period.

Questions, including a request for a copy of what is held: Say hello.