CASTLY — PRIVACY POLICY

 CASTLY — PRIVACY POLICY

Last Updated: February 20, 2026

━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. INTRODUCTION

Castly ("we," "our," or "the Extension") is a Chrome browser extension designed to enhance the Etsy seller dashboard experience. We are committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. DATA WE COLLECT

2.1 Data Stored Locally (On Your Device Only)

The following data is stored exclusively in your browser's local storage (chrome.storage.local) and is NEVER transmitted to our servers:

• Dashboard statistics (revenue, orders, views, visits, conversion rate)

• Daily stats snapshots (up to 35 days of historical data)

• Earnings goals you set in the popup

• Saved shops list (up to 100 shops)

• Extension settings (dark mode, profit margin, privacy mode, notification preferences)

• Cached listing analytics data (temporary, from third-party API)

2.2 License Key Data

When you activate a Pro license, the following is sent to our payment provider (Polar.sh):

• Your license key

• A device identifier (a hash of your browser's user agent string — not personally identifiable)

This is used solely to validate your license and enforce per-device activation limits.

2.3 Data We Do NOT Collect

We do NOT collect, store, or transmit:

• Your Etsy login credentials or session cookies

• Your personal name, email address, or payment information

• Your browsing history outside of Etsy

• Your Etsy customer or buyer information

• Analytics or telemetry data about your usage of the extension

• Any data to advertising networks

3. HOW THE EXTENSION WORKS

3.1 Dashboard Data

Castly reads your Etsy dashboard, stats, orders, and activity pages to display enhanced analytics. This is done entirely within your browser using content scripts and hidden iframes. No dashboard data leaves your browser.

3.2 Background Data Sync

The extension periodically fetches your Etsy dashboard pages in the background (using your existing Etsy session) to keep data up to date. This communication is strictly between your browser and Etsy's servers — we have no access to it.

3.3 Listing Spy (Pro)

The Listing Spy feature uses the HeyEtsy API (a third-party service) to retrieve publicly available listing analytics such as view counts, sales estimates, and tags. Only public Etsy listing IDs are sent to this API. No personal or seller account data is shared.

3.4 Notifications

Sale notifications are generated locally in your browser based on order data scraped from your Etsy dashboard. Notification content (buyer name, item, amount) is never transmitted externally.

4. THIRD-PARTY SERVICES

4.1 Polar.sh (License Validation)

We use Polar.sh to process payments and validate license keys. When you purchase or activate a Pro license, Polar.sh handles the transaction. Their privacy policy applies to payment processing: https://polar.sh/legal/privacy

4.2 Etsy

The extension interacts with Etsy's website (etsy.com) using your existing authenticated session. We do not intercept, store, or forward your Etsy session tokens or credentials.

5. PERMISSIONS EXPLAINED

The extension requests the following Chrome permissions:

• storage — Save your settings, stats, and saved shops locally

• activeTab — Access the current Etsy tab to inject the enhanced dashboard

• notifications — Show desktop notifications when you make a sale

• alarms — Schedule periodic data refresh and license re-validation

• scripting — Inject content scripts into Etsy pages

• webNavigation — Detect Etsy's single-page app navigation to re-inject scripts

• offscreen — Play the cha-ching notification sound in the background

• contextMenus — Add quick links to the extension's right-click menu

• declarativeNetRequest — Allow hidden iframes to load Etsy pages for background data scraping

Host permissions:

• https://www.etsy.com/* — Required to read and enhance your Etsy dashboard

• https://api.polar.sh/* — License key validation

• https://gist.githubusercontent.com/* — Remote configuration file

6. DATA RETENTION

• Local storage data persists until you uninstall the extension or clear your browser data

• Daily stats snapshots are automatically pruned after 35 days

• Listing analytics cache expires after 30 minutes

• License data is removed when you deactivate your license

7. DATA SHARING

We do NOT sell, rent, or share any of your data with third parties. The only external communications are:

• License key validation with Polar.sh (license key + device hash only)

• Your browser's normal requests to Etsy.com (your existing session)

8. YOUR RIGHTS

You have full control over your data:

• View stored data — Open Chrome DevTools → Application → Extension Storage

• Delete all data — Uninstall the extension, or right-click the icon → Manage Extension → Clear Data

• Deactivate license — Click "Deactivate" in the extension popup to remove license data from your device and free up your activation slot

• Disable notifications — Toggle notifications off in the extension popup

• Privacy Mode — Enable privacy mode to blur sensitive information on screen

9. CHILDREN'S PRIVACY

Castly is not directed at children under 13. We do not knowingly collect data from children.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date above. Continued use of the extension after changes constitutes acceptance of the updated policy.

11. CONTACT

If you have questions about this Privacy Policy, please contact us at:

Castlypro@gmail.com

━━━━━━━━━━━━━━━━━━━━━━━━━━━