Privacy Policy

Who we are

CleverSheetsCo is run by 3rd Prints LLC, a Massachusetts limited liability company. In this policy "we" and "us" mean that company. You can reach us about anything on this page at privacy@cleversheetsco.com.

What CleverSheetsCo does

CleverSheetsCo builds a website for an Etsy shop. A seller gives us their Etsy Share & Save link. We read the shop's public listings from Etsy and publish a fast, search-friendly storefront for them. Every product link sends the buyer to that seller's Etsy listing. We do not sell anything ourselves and we never handle a buyer's order or payment.

What we collect

We collect only what the service needs to work.

• Your account. Your email address and a hash of your password. We use Better Auth, which hashes the password before it is stored, so we never hold the password itself.
• Google or Apple sign-in, if you use it. The provider gives us an account identifier and an email address. Google also gives us the name and profile picture on your Google account, and we store both. Apple may give a private relay address instead of your real one, and sends your name only on the first sign-in.
• Your session. One cookie, scoped to our dashboard address only. It cannot be read from any shop subdomain we host.
• What you tell us about your shop. Your Etsy Share & Save link, the subdomain you pick, and the shop story you write for your storefront and About page. That text is published on your public storefront, because that is what it is for.
• Etsy listing information. We read publicly available listing data through the Etsy Open API (with the public Etsy RSS feed as a fallback). We do not scrape Etsy web pages.
• Bot protection. Sign-in, sign-up and password reset are protected by Cloudflare Turnstile, which checks that a real person is submitting the form.
• Subscription information. We keep Stripe customer and subscription identifiers, your plan and billing status, billing dates and cancellation status, and identifiers and timestamps used to process billing events. We send Stripe your account email address and account and shop identifiers to set up and manage your subscription.

What we do not collect

Stripe handles card details directly through Stripe Checkout and the Stripe Customer Portal. We do not receive or store your full card number or security code.

We do not use analytics or advertising trackers. We are not claiming that we use no cookies at all, because the sign-in session above needs one. We do not sell or rent your personal information, and we do not share it for advertising.

Email we send you

We send transactional email only: confirming your email address and resetting your password. It goes out through Cloudflare Email Service. We do not send marketing email.

Who else handles your data

• Cloudflare hosts the service, stores the database, caches pages and sends our email.
• Etsy provides the listing data, and receives every buyer we send to a seller's listing.
• Google and Apple are involved only if you choose to sign in with them.
• Stripe processes subscription payments, manages billing and sends payment receipts and payment-failure emails.

How we protect your data

Massachusetts data-security rules (201 CMR 17.00) apply to any business that holds personal information about a Massachusetts resident, including encrypting personal information sent across public networks. These are the measures we actually have in place:

• All traffic to and from the service is encrypted in transit with TLS, through Cloudflare.
• Passwords are hashed by Better Auth before storage. We cannot read your password.
• The session cookie is host-only, so it is not exposed to the shop sites we host.
• Credentials and API keys are held as Cloudflare Workers secrets and are never kept in our code.
• Turnstile sits in front of the sign-in, sign-up and password-reset forms.

We are not claiming any security certification, external audit or formal security review. No service can promise that data is perfectly safe.

How long we keep it

We keep your account and shop data for as long as your account exists. Ask us to close your account and we delete it, except anything we have to keep by law.

Your rights

Email us and you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Etsy sellers are all over the world, so if you live in the UK or the European Economic Area you also have those rights under the UK and EU data protection rules, including the right to complain to your local data protection authority.

Children

CleverSheetsCo is a business tool for Etsy sellers. It is not meant for children under 16.

Changes to this policy

If we change this policy we publish the new version on this page with a new effective date at the top. If the change is significant and you have an account, we will email you.

Contact us

Privacy questions and requests go to privacy@cleversheetsco.com, addressed to 3rd Prints LLC.