Privacy policy

UrbandiaryArt operates Social Studio, a private, single-owner tool for preparing artwork promotions. It is not an Etsy, Pinterest, Meta or X product.

Information used

• The owner’s login email, a salted hash of a randomly generated login secret, and a signed session cookie are used to restrict workspace access. The session cookie is Secure, HttpOnly and SameSite=Strict, with a maximum 14-day lifetime.
• Public Etsy listing titles, descriptions, IDs, prices and artwork-image references are read to prepare promotions. The integration does not read buyers, orders, payment details or private messages.
• Editable drafts, images and preparation-status records are stored in the owner’s browser using IndexedDB. Exported JSON and ZIP backups are stored wherever the owner saves them.
• Cloudflare processes network requests and may process IP addresses and operational logs as the hosting provider. We do not add advertising pixels, advertising cookies or third-party analytics.

Connected services and publication

Etsy application credentials are kept in encrypted server secrets, not in public pages or downloaded dashboard HTML. The owner’s local credential backup uses Windows CurrentUser DPAPI encryption. Pinterest, Meta and X posting connections are not yet enabled. New connection scopes and publication behavior must be reviewed before activation.

Public listing data is used only to prepare this shop’s promotions, not for resale, third-party targeting or training AI models. Nothing is published or scheduled automatically.

Retention and deletion

The server’s temporary Etsy listing cache lasts up to five minutes. Browser workspace data stays until the owner deletes it or clears site storage. Local exports and encrypted credential backups remain until the owner deletes them. Logout clears the current browser session cookie; rotating the server session secret invalidates existing sessions. Removing an integration’s server secrets stops its API access.

Sharing and security

Requests are sent to Cloudflare and Etsy only as required to host the app and retrieve shop information. No credentials are embedded in public app files. Reasonable safeguards reduce risk but cannot guarantee absolute security. External sites opened for manual posting apply their own privacy policies.

Contact and data requests

For questions, access or deletion requests, contact UrbandiaryArt through Etsy shop messages. Only the shop owner can use the workspace; it does not offer customer accounts.