Your data
This is the privacy policy. It is a list of columns rather than a page of assurances, because the columns are the part that is actually true.
About you
| Field | Where it comes from |
|---|---|
| Email address | Google sign-in. The only thing requested from Google is
your email address — scope openid email. No profile, no name, no photo,
no contacts, no calendar, nothing else. |
| Whether mail is on | Your setting. |
| Currency | Your setting. |
About your plan
| Field | Note |
|---|---|
| Each person’s name | Typed by you, and only ever seen by you. It can be a first name, an initial, or “the neighbour”. Nothing here needs it to be real and nothing is ever done with it except printing it back on your own page. |
| What to search for, and the budget | Typed by you. |
| Today’s count at that budget, and the cheapest price | Current values. Overwritten every day. |
| The widest that count has ever been | One number per person. The only thing carried from one day to the next, and the whole reason a collapse can be noticed. |
| Saved candidates: listing id, title, link, price | Public Etsy listing data. Refreshed every day, never accumulated. |
| The word last used about each person | Stops the same warning being sent twice. |
There is no history table. No price series, no count series, nothing that could be assembled into a record of the market over time. Etsy’s API terms limit how long listing data may be held, and a plan only needs today’s answer plus one remembered high-water mark to know that today’s answer got worse.
Your Etsy account
Not touched, not asked for, not seen. timqua reads public Etsy listing data with an application key, exactly as any visitor to the site would. There is no Etsy sign-in, no permission to grant and nothing to revoke — a gift list has no business asking for access to anybody’s Etsy account, including yours.
Who else sees any of it
Nobody. Nothing is sold, shared or handed to an analytics service. There are no third-party
scripts on any page — the site sends no JavaScript at all and its content security policy
is script-src 'none', so it could not run one if it wanted to. There are no
tracking cookies; the single cookie is a signed session so the site knows it is you.
The app runs on Cloudflare Workers and stores its data in Cloudflare D1. Email goes through Cloudflare’s email service. Google receives a sign-in request. Etsy receives the searches described in How this watches — keywords and a price cap, with nothing identifying you attached.
Deleting all of it
Delete everything on your account page removes the plan, every person, every shortlist and your email address in a single transaction. There is no soft-delete and no thirty-day grace period, so there is nothing to change your mind about afterwards.
Questions, including a request for a copy of what is held: Help.