Our Etsy app
A private tool, for our shop only, used by its owner and no one else.
Purpose
Islamic Elegant Art runs a small application that connects to our own Etsy shop. It exists so that the owner can look at listings, make changes to them and see incoming orders without clicking through every page by hand. There is one shop, one user and no public sign-up.
What the app does
- Reads the details of our shop and our listings.
- Edits our listings when the owner chooses to.
- Reads our own orders and transactions to prepare and track them.
What the app does not do
- It does not touch any other seller's shop, and it does not scrape Etsy.
- It does not message buyers.
- It does not sell or share Etsy data, and it does not pass data to advertising or marketing platforms.
- It does not carry out analytics, and nothing it reads is used to train AI.
The four permissions
shops_rIdentifies the shop the app is connected to.listings_rReads titles, descriptions, prices and stock for our listings.listings_wSaves edits the owner makes to those listings.transactions_rReads our orders so they can be prepared for dispatch.
How signing in works
- The owner opens the private account page and enters the site password.
- The owner ticks the box accepting the app terms and the privacy policy. The moment and the version of the terms are recorded.
- The browser travels to Etsy under the OAuth 2.0 standard with PKCE. Etsy displays the four permissions and asks for approval. The Etsy password is typed on Etsy and is never seen by us.
- Etsy sends the browser back with a single-use code, which the app trades for access tokens.
- Tokens are encrypted using AES-256-GCM before they are saved. The status page confirms whether the connection is active and never shows a token.
If the approving account is not the shop owner's, the tokens are thrown away immediately.
How to revoke access
The owner can press Disconnect on the account page, which erases the stored tokens at once. Access can also be removed from within Etsy, on the connected-apps page of your account settings. Both routes cut the app off straight away.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.