How we connect to Etsy
EmmasMapArt Shop Sync is a private app that connects to one Etsy shop, EmmasMapArt, through the Etsy Open API (version 3). The shop owner is its only user.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
Who uses it
Only the owner of Emma's Map Art. The app has no sign-up, isn't listed anywhere and isn't offered to other Etsy sellers. API credentials stay on our own server and are never entered into anyone else's software. If that ever changes, we will apply to Etsy for the right kind of access first and update this page.
What it does
- Reads our new and open orders, so we can make, pack and ship them on time.
- Reads our own listings, prices and stock levels, so our product records stay in sync with the shop.
- Creates and updates our own listings (titles, descriptions, photos, tags, prices and quantities), so we don't have to enter them one by one.
- Reads our shop details and sections, so the app works with the right shop.
What it doesn't do
- It doesn't access any other seller's shop, and it doesn't collect data about other shops, buyers or listings on Etsy.
- It doesn't scrape Etsy pages. Everything goes through the official API, within Etsy's rate limits.
- It doesn't message buyers. Order, shipping and tracking updates reach buyers through Etsy itself.
- It doesn't sell anything outside Etsy or send buyers away from Etsy checkout.
- It doesn't sell, rent or share Etsy data, doesn't send it to advertising or marketing platforms, and doesn't use it for analytics or to train AI models.
Permissions it requests
| Etsy permission | Why we need it |
|---|---|
shops_r | Read our shop's name, sections and settings so the app works with the right shop. |
listings_r | Read our own listings, prices and stock levels to keep our records in sync. |
listings_w | Create and update our own listings: titles, descriptions, photos, tags, prices and quantities. |
transactions_r | Read our own orders so we can make, pack and ship them on time. |
How the connection works
- The shop owner starts the connection on this site, accepts our app terms and privacy policy, and is sent to Etsy's sign-in page. We never see or store the Etsy password.
- After the owner approves, Etsy redirects back to
https://emmasmapart.com/oauth/callbackwith a one-time code. The connection uses OAuth 2.0 with PKCE. - The site exchanges the code for an access token and a refresh token. Both are encrypted (AES-256-GCM) before they are stored, and the encryption key is kept separately as a secret.
- If the Etsy account that signs in isn't the shop owner's, the tokens are thrown away and nothing is stored.
Where data is kept
The site and the encrypted tokens are hosted on Cloudflare. Listing details we show are never more than 6 hours older than on Etsy, and other Etsy information never more than 24 hours older. Order and listing data is kept only as long as our privacy policy says. The app's admin pages need the owner's password, and all traffic is HTTPS only.
Switching it off
The shop owner can revoke the app's access at any time from their Etsy account settings, and it stops working immediately. We can also delete the stored tokens from our side.
Support
Questions about the app or this page go to hello@emmasmapart.com. The inbox is monitored and we reply within two working days.