Privacy

Last updated: 7 November 2026

Listingshelf is a small set of listing tools. This page explains what data each tool handles and what leaves your browser. The short version: CSV files, scores and pricing calculations stay on your device. The free generator sends only the text you type into it. The studio additionally reads the product URL you submit and sends the facts and image URL needed for each action to the provider named on this page.

CSV converter

The CSV file is read with the browser’s File API, parsed and converted in the page. It is not uploaded, logged or stored by us. When you close or reload the tab, the file is gone from the page.

Listing scorer and profit calculator

Both tools run entirely in the browser. The listing text, tags and cost figures you enter are not sent anywhere.

Listing and description generator

When you press Generate, the product name, category, audience, features, tone and keywords you entered are sent to our Cloudflare Worker. If a DeepSeek key is configured, the Worker forwards the request to DeepSeek to produce a draft; if DeepSeek is unavailable, it uses Cloudflare Workers AI. We do not attach an account, name or email to the request. We do not store the prompt or the draft in a database.

DeepSeek and Cloudflare process the request as our model and hosting providers. Their handling of that data is governed by their own terms and privacy policies. Do not enter confidential information, personal data about other people, or anything you would not put in a product listing.

Studio

The studio is a chain of explicit actions. Each one sends only what that action needs:

• Reading a URL. The URL you paste is fetched by our Worker. For Shopify stores it requests the public product JSON. For supported marketplaces it calls Bright Data. If neither works, it reads the public page with an ordinary request. The page content is used to extract product facts and is not saved to a database.
• Writing or translating. The product facts shown in the form, the draft and the target language are sent to DeepSeek. The result is returned to your browser and not stored.
• Image actions. The public image URL you select, and a scene prompt if you write one, are sent to WaveSpeed. WaveSpeed processes the image and returns a hosted output URL. The image itself is not uploaded by us.
• Publishing to Shopify. When you connect a store, Shopify sends an access token to our Worker. We encrypt that token and set it as an HttpOnly cookie in your browser; we do not write it to a database. On publish, the product fields, selected image URLs and translation are sent to Shopify’s Admin API under that token. Disconnecting clears the cookie. The token is visible to Shopify and to this site’s Worker while it handles your request, so treat the connection like a store credential.
• Export. The Shopify CSV is assembled in your browser from the fields on screen. It is never uploaded.

These providers may process requests outside your country. Do not submit personal data, confidential supplier terms or images you do not have the right to use.

Credits and rate limiting

The free generator applies a rate limit of 30 requests per hour per IP address. The studio records a credit balance in the Worker’s memory, keyed by IP address, for 24 hours. The IP is used only to enforce those limits and may appear in Cloudflare’s standard request logs. We do not use it to build a profile or to identify you. A restart clears the in-memory balance.

Local storage and cookies

The theme toggle stores your light or dark choice in localStorage. After you publish, the studio also remembers that product’s ID in localStorage under the store domain, so the next publish updates the same product instead of creating a duplicate. The Shopify connection is a first-party, HttpOnly, SameSite=Lax cookie whose value is encrypted with a server secret; it is not readable by page scripts and is not a tracking cookie. There are no advertising cookies, analytics cookies or third-party tracking scripts. Fonts are loaded from Google Fonts, which receives the request needed to serve the font files.

Your rights

Because we do not hold an account or a stored draft for you, there is usually nothing to export or delete. If you believe a request log contains your personal data and want it removed, write to hello@listingshelf.com with the date and approximate time of the request. Depending on where you live, you may also have the right to access, correct, restrict or object to processing, and to complain to a data protection authority.

Changes

If a future version adds accounts, saved listings or payments, this page will be updated before those features collect anything. The date at the top shows the current version.

Contact

Questions about this page: hello@listingshelf.com. See also the terms.