Privacy policy.

1. Who We Are

ListingLab (“we”, “us”, “our”) is a UK-based service that provides AI-powered analysis for Etsy listings. We are the data controller for the personal data we process. If you have questions about this policy, contact us at hello@listinglab.pro.

2. What Data We Collect

• Account information — your email address when you sign up.
• Listing data — titles, descriptions, tags, and images you submit for analysis.
• Usage logs — pages visited, features used, timestamps, and anonymised device/browser information.
• Anonymous rate-limit ID — a server-signed HttpOnly cookie (ll_anon_id) used solely to enforce free-tier usage limits. Not linked to any personal information.
• Where you came from — if you arrive from a search engine, another site, or a campaign link, we record that. It stays in your browser for the visit, and if you give us your email it is saved alongside it, so we know which marketing brought you.
• Checkout details (only if you accepted cookies) — your IP address, browser type and Meta’s click and browser IDs when you start a checkout, kept until your purchase has been reported to Meta and never for more than three days (see section 5).

3. How We Use Your Data

• To provide, maintain, and improve the ListingLab service.
• To process your listing data through our AI analysis engine and return recommendations and rewrites.
• To manage your account and subscription.
• To communicate service updates or respond to support requests.

We do not sell or rent your personal data. If you accept cookies, we share limited data with Google, Microsoft, Meta and Affonso for our own analytics and advertising (including showing our ads to people who have visited) and to credit affiliates, as described in section 5.

4. Third-Party Processors

We use the following third-party services to operate ListingLab:

• Stripe — handles all payment processing. We never see or store your card details. Stripe’s privacy policy applies to payment data.
• Supabase — provides our database and authentication infrastructure. Your account and listing data is stored in Supabase’s cloud infrastructure.
• Anthropic (Claude) — processes your listing text to generate AI-powered analysis. Listing text is sent to Anthropic’s API for analysis only and is not stored or used by Anthropic for model training.
• Sentry — records errors, and how quickly pages load, so we can fix faults. It is set up not to record the contents of requests or cookies, and it cuts everything after a “?” or “#” from the web addresses in its error and timing reports. When an error happens in your browser, it may also keep a short recording of the page, with all text, images and link addresses hidden; that recording can include the full address of the page you were on.

5. Cookies & Tracking

We use the following cookies and tracking technologies:

Essential (always active, required to run the site):

• Supabase authentication cookies — sign-in session management for signed-in users.
• ll_anon_id — a server-signed anonymous ID used to enforce free-tier usage limits (does not identify you).
• ll_cookie_consent_v2 — records your consent choice. When you start a checkout, we also note on the order, at Stripe, whether you accepted, declined or did not answer.
• ll_currency — remembers your currency preference.
• Vercel Analytics — privacy-friendly page-view counting; no cookies set, no personal data collected, cannot identify individuals.
• ll_ref — remembers an affiliate referral code from a link you clicked, so the correct affiliate is credited if you later sign up.

Where you came from (recorded when you arrive from a link or a search, regardless of your cookie choice):

• ll_attrib — records how you first reached our site (search engine, referring website, or a campaign tag or ad click ID from a link you clicked), so we know which marketing is bringing people to ListingLab. It is saved when you arrive from a link or a search, before you make any cookie choice. It clears when you close the tab. It is never shared with anyone, with one exception: if you accept cookies, the Facebook ad click ID in it is passed to the Meta Pixel, which keeps it in its _fbc cookie for up to 90 days, so Meta can link your visit to the ad you clicked, and if you then buy a plan it is sent to Meta with the purchase (see Meta Pixel below).

With your consent (opt-in via the cookie banner):

• Google Analytics 4 (Google) — measures site usage and traffic sources.
• Meta Pixel (Meta / Facebook) — tracks conversions and enables retargeting via Facebook advertising. If you sign up or buy a plan, it also receives a scrambled (hashed) copy of your email address and your account ID, with that event and anything else it records for the rest of that visit, so Meta can match the sign-up or purchase to the Facebook ad you clicked. If you buy a plan, our server also reports the purchase to Meta, with the same scrambled email and account ID plus your IP address, browser type and Meta’s click and browser IDs (its _fbc and _fbp cookies), so the sale is counted even if the page you return to after paying never loads. We hold those four details from the moment you start a checkout until the purchase has been reported, or delete them if the checkout expires unpaid; either way, never for more than three days.
• Microsoft Advertising (Microsoft) — measures visits and purchases, so Microsoft can tell which came from our Microsoft (Bing) ads.
• Affonso — records affiliate referrals via a 30-day cookie.

Nothing under “With your consent” loads, and nothing is reported to Meta from our server, until you click Accept on the cookie banner. If you click Decline (or ignore the banner), only the Essential items and “Where you came from” above are active.

To change your consent later, clear the ll_cookie_consent_v2 entry in your browser’s storage and the banner will reappear on your next visit.

6. Data Retention

We retain your account and listing data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

7. Your Rights (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your account and associated data.
• Data portability — request an export of your data in a machine-readable format.
• Object — object to processing of your data in certain circumstances.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email hello@listinglab.pro. We will respond within 30 days.

8. Legal Basis for Processing

We process your data on the following legal bases:

• Contract — processing necessary to provide the service you signed up for.
• Legitimate interest — usage analytics to improve the service, fraud prevention.
• Consent — where you have given explicit consent (e.g., marketing emails, and the analytics and advertising cookies in section 5, including a purchase reported to Meta).

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the site. Continued use of ListingLab after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or to exercise your rights, contact us at hello@listinglab.pro.