Privacy policy.
last updated · 28 october 2026
1. Who We Are
ListingLab (“we”, “us”, “our”) is a UK-based service that helps Etsy sellers with their listings: a shop audit from Etsy’s own numbers, and AI-written rewrites. We are the data controller for the personal data we process. If you have questions about this policy, contact us at hello@listinglab.pro.
2. What Data We Collect
- Account information — your email address when you sign up.
- Listing data — titles, descriptions, tags, and images of the listings you audit or rewrite.
- Usage logs — pages visited, features used, timestamps, and anonymised device/browser information.
- Anonymous rate-limit ID — a server-signed HttpOnly cookie (ll_anon_id) used solely to enforce free-tier usage limits. Not linked to any personal information.
- Where you came from — if you arrive from a search engine, another site, or a campaign link, we record that. It stays in your browser for the visit, and if you give us your email it is saved alongside it, so we know which marketing brought you.
- Checkout details (only if you said yes to Meta) — your IP address, browser type and Meta’s click and browser IDs when you start a checkout, kept until your purchase has been reported to Meta and never for more than three days (see section 5).
- Your cookie choice — if you are signed in, whether you said yes or no to Meta, when, and where (the cookie banner, or the Meta box we showed at sign-up and checkout until October 2026), so we can show what you agreed to and honour a no on every device.
3. How We Use Your Data
- To provide, maintain, and improve the ListingLab service.
- To run the shop audit, and to write rewrites and new listings with AI.
- To manage your account and subscription.
- To communicate service updates or respond to support requests.
We do not sell or rent your personal data. If you accept cookies, we share limited data with Google, Microsoft, Meta and Affonso for our own analytics and advertising (including showing our ads to people who have visited) and to credit affiliates, as described in section 5. If you ticked only the Meta box we showed at sign-up and checkout until October 2026, we share it with Meta alone.
4. Third-Party Processors
We use the following third-party services to operate ListingLab:
- Stripe — handles all payment processing. We never see or store your card details. Stripe’s privacy policy applies to payment data.
- Supabase — provides our database and authentication infrastructure. Your account and listing data is stored in Supabase’s cloud infrastructure.
- Anthropic (Claude) — writes rewrites and new listings from your listing text, which we send to Anthropic’s API. Anthropic deletes it within 30 days (longer only if its safety systems flag it) and does not use it to train its models.
- Sentry — records errors, and how quickly pages load, so we can fix faults. It is set up not to record the contents of requests or cookies, and it cuts everything after a “?” or “#” from the web addresses in its error and timing reports. When an error happens in your browser, it may also keep a short recording of the page, with all text, images and link addresses hidden; that recording can include the full address of the page you were on.
- Resend — sends our emails: sign-in codes, account notices, and the emails you signed up for. It receives your email address and the email’s contents.
- Vercel — hosts the website. Like any web host it keeps short server records of each request (the page asked for, the time, your browser type and IP address) for about a day, so we can fix faults. We keep email addresses out of our own records there.
5. Cookies & Tracking
We use the following cookies and tracking technologies:
Essential (always active, required to run the site):
- Supabase authentication cookies — sign-in session management for signed-in users.
- ll_anon_id — a server-signed anonymous ID used to enforce free-tier usage limits (does not identify you).
- ll_cookie_consent_v2 — records your consent choice, with when and where you made it. When you start a checkout, we also note on the order, at Stripe, whether you said yes, no or did not answer.
- ll_ad_consent — a copy of the Meta part of your choice (yes or no) that our server can read, so it never tells Meta anything unless you said yes. Kept for a year.
- ll_currency — remembers your currency preference.
- Vercel Analytics — privacy-friendly page-view counting; no cookies set, no personal data collected, cannot identify individuals.
- ll_ref — remembers an affiliate referral code from a link you clicked, so the correct affiliate is credited if you later sign up.
Where you came from (recorded when you arrive from a link or a search, regardless of your cookie choice):
- ll_attrib — records how you first reached our site (search engine, referring website, or a campaign tag or ad click ID from a link you clicked), so we know which marketing is bringing people to ListingLab. It is saved when you arrive from a link or a search, before you make any cookie choice. It clears when you close the tab. It is never shared with anyone, with one exception: if you accept cookies, the Facebook ad click ID in it is passed to the Meta Pixel, which keeps it in its _fbc cookie for up to 90 days, so Meta can link your visit to the ad you clicked, and if you then buy a plan it is sent to Meta with the purchase (see Meta Pixel below).
With your consent (opt-in via the cookie banner; until October 2026, the Meta Pixel and Meta reports also via a Meta box at sign-up or checkout):
- Google Analytics 4 (Google) — measures site usage and traffic sources.
- Meta Pixel and Meta reports (Meta / Facebook) — tells Meta which of our Facebook and Instagram ads brought you here, so Meta can show our ads to sellers like you, and enables retargeting. With your yes, Meta is told when you:
- look at our plans or your shop audit result (from your browser only);
- leave your email for a shop audit, a new listing or our Etsy tips (a “lead”);
- create an account;
- start a checkout, with the plan and its price;
- buy a plan, with its price.
- Microsoft Advertising (Microsoft) — measures visits and purchases, so Microsoft can tell which came from our Microsoft (Bing) ads.
- Affonso — records affiliate referrals via a 30-day cookie.
Nothing under “With your consent” loads, and nothing is reported to Meta from our server, until you click Accept on the cookie banner. Until October 2026 there was also a box at sign-up and checkout, “Let ListingLab tell Meta which ad brought you here”, never ticked for you; it turned on the Meta Pixel and Meta reports only, and a yes given there stands until you change your choice below. If you click Decline (or ignore the banner), only the Essential items and “Where you came from” above are active. A no given while signed in is saved on your account and honoured on every device you sign in on.
You can change your choice at any time here:
You have not chosen yet.
6. Data Retention
We keep your shop data (your shops, listings, rewrites and their history) while you have a paid or paused plan. When a paid plan ends, we delete it 14 days later, or straight away if the plan ended because a payment failed and wasn’t updated. We keep your account, plan and payment records so you can come back and for our legal and tax records. If you delete your account, we remove your personal data within 30 days.
7. Your Rights (GDPR)
Under the UK General Data Protection Regulation (UK GDPR), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your account and associated data.
- Data portability — request an export of your data in a machine-readable format.
- Object — object to processing of your data in certain circumstances.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email hello@listinglab.pro. We will respond within 30 days.
8. Legal Basis for Processing
We process your data on the following legal bases:
- Contract — processing necessary to provide the service you signed up for.
- Legitimate interest — usage analytics to improve the service, fraud prevention.
- Consent — where you have given explicit consent (e.g., marketing emails, and the analytics and advertising cookies in section 5, including the leads, sign-ups, checkouts and purchases reported to Meta).
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the site. Continued use of ListingLab after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions or to exercise your rights, contact us at hello@listinglab.pro.