Compliance · Privacy

Privacy Policy

Last updated: April 29, 2026.

Pantry Suite is a private administrative tool operated by elfatimishop. This page explains what data the tool processes, why, and how long it is retained.

1. Visitors to this landing page

This landing page itself does not set tracking cookies, run third-party analytics, or collect personal information from visitors. The page loads Inter and Playfair Display from Google Fonts, which may receive your IP address when fonts load. Disable web fonts in your browser to opt out.

2. Operator data processed by the application

• Source design assets authored by the operator (fonts, papercraft templates, paper kits).
• Generated cover artwork and bundle manifests produced from those source assets.
• Etsy listing identifiers and metadata returned by the Etsy API after publishing to the operator’s own shop.
• Operational telemetry — build identifiers, run timings, and error logs — stored locally on the operator workstation.
• OAuth tokens issued by Etsy, stored in a permission-restricted file on the operator workstation.

3. Data we do not collect or access

• Buyer payment information — all transactions occur on Etsy.
• Buyer addresses, order history, or messaging.
• Listings, transactions, or content from any shop other than the connected operator’s own.
• Third-party visitor analytics from this landing page.

3a. We never sell or transfer Etsy data

Listing data, image URLs, and metadata fetched from the Etsy Open API are used solely for the operator’s own catalog reconciliation. Pantry Suite never sells, leases, trades, syndicates, or otherwise transfers Etsy data to any third party. No advertising identifiers, retargeting profiles, or buyer-enrichment datasets are created from Etsy data.

4. Third-party services

• Etsy API — used by the application to publish and reconcile metadata for the operator’s own shop. Etsy is a trademark of Etsy, Inc. Pantry Suite is not certified, endorsed, or affiliated with Etsy, Inc.
• Optional AI image generation — if enabled by the operator, used to render editorial cover art from operator-authored source descriptions. Generated images are stored locally on the operator workstation.
• Google Fonts — serves Inter and Playfair Display.

5. Retention & cache TTL

Operational logs are retained for 30 days on the operator workstation. Generated artwork and listing metadata are retained for the lifetime of the corresponding listing in the operator’s own shop, then archived for one year before deletion. OAuth tokens persist until the operator revokes them in their Etsy account settings.

Listing data fetched from the Etsy API is cached on the operator workstation for at most twenty-four hours before re-validation against the API. Cached data is used solely for local reconciliation and is never displayed publicly without re-fetch.

6. Cookies

The landing surface itself does not set tracking, analytics, or marketing cookies. WordPress may set strictly-necessary session cookies when an operator authenticates to the administrative interface (wordpress_logged_in_*, wp-settings-*); these never apply to anonymous visitors of the landing page.

7. Data subject rights

Where the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) applies, the operator’s own customers may exercise the following rights against the operator’s Etsy storefront (the controller of buyer data):

• Right of access — obtain a copy of personal data held.
• Right to rectification — correct inaccurate data.
• Right to erasure — request deletion.
• Right to restrict processing.
• Right to data portability.
• Right to object to processing.
• Right not to be subject to solely automated decisions.

Pantry Suite itself does not process buyer personal data, so these requests are routed to Etsy or to the operator. To submit a request to the operator, see contact below.

8. Data controller

The data controller for any operator-side processing performed by Pantry Suite is elfatimishop (Independent studio), operating the Etsy shop linked from this site. Etsy, Inc. is the controller for all buyer-side processing carried out on the Etsy platform.

9. International transfers

Pantry Suite communicates only with Etsy’s API endpoints (United States) and Google Fonts (global CDN). Where applicable, transfers rely on the data importer’s own standard contractual clauses or equivalent safeguards.

10. Changes to this policy

This policy may be updated. Material changes will be reflected by updating the date at the top of this page. The operator is responsible for notifying connected third parties of substantial changes that affect them.

11. Operator data deletion

The operator may delete all data Pantry Suite holds at any time by:

• Revoking the OAuth grant in Etsy account settings — the application immediately invalidates its refresh token and ceases API access.
• Removing the local WordPress database (wp_options entries with the pantry_suite_ prefix and the ps_product custom post type).
• Deleting cached listing metadata and generated artwork from the operator workstation.

No remote service holds operator data; deletion is therefore final once the local workstation is wiped.

12. Contact

Privacy questions or data-subject requests may be addressed to the shop owner via the Etsy storefront contact form for elfatimishop. Initial response within ten business days.