Trust & security
Is Everlyst safe to connect to your Etsy shop?
Everlyst connects through Etsy's official OAuth flow, so your Etsy password is never entered into Everlyst. It requests four Etsy API permissions, and only one of them can change anything. It has no access to orders, payouts or buyer messages. No listing is altered until you confirm a preview of the exact changes, and you can revoke access from your Etsy account at any time.
Permissions
What Everlyst can actually do to your shop
Etsy shows you these four permissions on the authorisation screen. Three are read-only. Here is what each one would mean if it were used badly.
| Permission Etsy shows you | What it lets Everlyst see or change | Worst case if it went wrong |
|---|---|---|
| listings_r | Read every listing in the shop, including drafts, inactive listings and expired ones. | Read-only. On its own this permission cannot alter a single value in your shop. The worst case is that Everlyst displays listing data you had forgotten was there. |
| listings_w | Create, update and delete listings. | This is the only permission with real blast radius. A bad write changes field values on the listings it was pointed at. It reaches nothing outside listing data, so orders, payouts and your shop settings are out of range. |
| shops_r | Read shop-level reference data such as sections, shipping profiles and processing profiles. | Read-only. It exists so a bulk edit can only offer you a section or profile that genuinely exists in your shop, rather than writing a value Etsy will reject. |
| email_r | Read the email address attached to the Etsy account. | Read-only, and limited to one field. It is how a sync or a long bulk job tells you it has finished. It grants no access to Etsy messages or to buyer contact details. |
Out of reach
What Everlyst is never allowed to touch
- Orders and transactions. The Etsy scopes that read or write sales data are not requested at all.
- Payouts, balances and the card details buyers pay you with.
- Etsy messaging. Everlyst cannot read a conversation or send a message as you.
- Your Etsy password. You type it on Etsy, never into Everlyst.
- Buyer names, addresses and contact information.
The real question
Can Everlyst break my shop?
The honest answer has three parts, and the third one has limits worth knowing before you connect anything.
Nothing is written until you approve it
Every bulk operation ends on a preview of the values it is about to write, and the job runs only once you press Apply. Inline edits ask for a confirmation of their own. There is no background process that reaches into a connected shop and changes things on a schedule you did not set.
Etsy stays the authoritative copy
Everlyst keeps a synced cache of your catalog so the app stays fast, but that cache is a mirror rather than a replacement. Where the mirror and Etsy disagree, Etsy is right. A re-sync pulls fresh values immediately, and the cache reconciles on its own every few hours.
There is a recovery path, and it has edges
Supported editing operations save the values they are about to overwrite, so an unwanted job can be opened, reviewed and rolled back for the listings that are still eligible. It is a snapshot-backed recovery path for supported edits, not a full-shop archive. Creating a listing cannot be un-created, a permanent deletion on Etsy cannot be undone, and images and listing-state changes have no blanket undo coverage. Retention scales with your plan, so see pricing and the Backup & Restore page for where coverage starts and stops.
The part worth saying plainly: a confirmed edit is a real edit. Backup & Restore widens the margin for error, it does not remove it. Read the preview before you apply it.
Etsy's rules
Will using Everlyst get my shop suspended?
Everlyst is built entirely on Etsy's official Open API and authenticates through Etsy's own authorisation screen. It does not scrape Etsy pages, and it does not drive your seller account through a browser in the background. Every action it takes is a documented API call made with a token you granted and can withdraw.
It also respects Etsy's published rate limits, data-handling rules and seller protections. That is the same public integration route Etsy offers every third-party tool.
Everlyst is an independent application built on the Etsy API and is not affiliated with, endorsed by, or sponsored by Etsy, Inc. That independence cuts both ways. It means no special standing with Etsy, and it also means no arrangement you were not told about.
Your data
What happens to the data Everlyst holds
What is stored
- A mirrored copy of the catalog, covering listing records, prices, tags, sections, attributes, materials, image URLs and metadata.
- Backup & Restore snapshots, retained for the window your plan allows.
- Your account details: email, a hash of your password, and billing information.
- Activity logs recording which job ran and when.
What is never stored
- Your Etsy password, which Everlyst never receives in the first place.
- Buyer information of any kind.
- Payment details, balances and payouts.
- Anything not required to make the product work.
How it is protected
Connections use TLS 1.2 or higher, both between your browser and Everlyst and between Everlyst and Etsy's API. Stored data is encrypted on disk with AES-256. OAuth tokens are held encrypted and scoped to the four permissions listed above. Production access is limited to the engineers who maintain the system, granted per task and audited.
| If you | What happens to your data |
|---|---|
| Disconnect a shop | The cached listing data for that shop is purged within thirty days. |
| Cancel your subscription | Nothing is deleted straight away. The account drops to Free and snapshot retention trims to the Free window. |
| Delete your Everlyst account | Everything goes: cached data, snapshots, account details and activity logs. |
| Leave a Free account idle for ninety days | Cached listing data is purged. The account itself stays. |
- Your data is never sold or shared with a third party. Not aggregated, not anonymised, not for marketing partners.
- Your shop is never modified without an explicit confirmation from you.
- Your listings, tags, descriptions and photos are never used as training data for an AI model.
Sellers in the EU can export or delete their data at any time from account settings. The formal detail is in the privacy policy.
Leaving
How to remove Everlyst's access
Two routes, and either one is enough on its own. You can disconnect the shop from inside Everlyst, or revoke Everlyst directly from the apps list in your Etsy account settings.
Whichever you choose, the effect is the same and it takes hold at once. Etsy voids the token, and the app loses its ability to read or alter anything in that shop. Your listings stay exactly as they are on Etsy, untouched by the disconnection.
The steps for each route are in disconnect or reconnect a shop and Etsy permissions explained.
Scope
What Everlyst does not do
- It is not an order manager. No orders, no shipping labels, no buyer messages.
- It is not a full-shop archive. Backup & Restore covers supported operations, not every change that can happen to a listing.
- It is not an official Etsy product or an endorsed integration.
- It is not multichannel. Etsy only, with no publishing to Shopify, Amazon or anywhere else.
The people
Who actually builds this
Everlyst is built by one person. I am Kane, and I do the design, the code and the support. Security and privacy questions reach me directly at [email protected], not a ticket queue.
If you want the longer version, read the full story of why Everlyst exists.
Common questions
Questions sellers ask before connecting
Is Everlyst legit?
Yes. Everlyst is a real product built by a named solo founder, Kane, reachable at [email protected]. It runs on Etsy’s official Open API under a token you grant through Etsy’s own authorisation screen. It is a small independent project rather than a large company, and the About page explains who builds it and why.
Is Everlyst safe to connect to my Etsy shop?
Connecting uses Etsy’s official OAuth flow, so your Etsy password is never entered into Everlyst. Everlyst requests four permissions and only one of them can change anything. No listing is altered until you approve a preview of the exact changes, and you can withdraw access from Etsy at any moment.
Can Everlyst break my Etsy shop?
It cannot act on its own. Every bulk operation ends on a preview showing the values it is about to write, and the job runs only when you confirm it. Supported edits capture the values they overwrite, so an unwanted job can be reviewed and eligible values restored. A confirmed edit is still a real edit, so read the preview.
What permissions does Everlyst need?
Four Etsy API scopes: listings_r to read your listings, listings_w to create and update them, shops_r to read shop reference data such as sections and shipping profiles, and email_r to read the account email for job notifications. Three of the four are read-only.
Can Everlyst see my orders, payouts, or buyer messages?
No. The Etsy scopes covering transactions are not requested, so orders are simply out of reach. Everlyst never sees your Etsy Payments balance, your payouts, or the payment details buyers use. It also has no access to Etsy messaging and cannot send a message on your behalf.
Does Everlyst know my Etsy password?
No. Authentication happens on Etsy’s own domain through OAuth. Etsy verifies you and hands Everlyst a scoped token, which is stored encrypted. Your password is never transmitted to Everlyst and never stored there.
Can Everlyst change my listings without asking me first?
No. Bulk operations require you to click Apply on a diff preview, and inline edits require a confirmation. There is no background process that reaches into a connected shop and changes values on its own schedule.
What happens if a bulk edit goes wrong?
Supported editing operations save the values they are about to overwrite, and that snapshot is tied to the job that created it. You can open the job, check its results and any warnings, and restore eligible values through a tracked restore job. Coverage depends on the operation and the current state of the listing.
Will using Everlyst get my Etsy shop suspended?
Everlyst uses Etsy’s official Open API with a token you granted, and complies with Etsy’s rate limits, data-handling rules and seller protections. It is the same public integration path Etsy publishes for third-party tools. Everlyst is independent and not affiliated with Etsy, so it has no special standing and no hidden arrangement either.
Does Everlyst scrape Etsy or automate my seller account?
No. There is no page scraping and no browser automation driving your seller account in the background. Every action Everlyst takes is a documented API call made with the token you authorised, and that token can be withdrawn at any time.
How do I remove Everlyst’s access to my shop?
Two routes, either of which works on its own. Disconnect the shop from inside Everlyst, or revoke Everlyst from the apps list in your Etsy account settings. The token stops working immediately and your listings stay exactly as they are on Etsy.
What happens to my data if I disconnect or delete my account?
Disconnecting a shop purges its cached listing data within thirty days. Deleting your Everlyst account removes everything, including cached data, snapshots, account details and activity logs. Cancelling a subscription deletes nothing immediately, it drops you to Free and trims snapshot retention to the Free window.
Does Everlyst sell my data or use my listings to train AI?
No to both. Your data is never sold or shared with third parties, in any form, aggregated or otherwise. Your listings, tags, descriptions and photos are never used as training data for any AI model.
Is Everlyst owned by or affiliated with Etsy?
No. Everlyst is an independent application built on the Etsy API and is not affiliated with, endorsed by, or sponsored by Etsy, Inc. It is built by one person and funded by its own subscriptions.
Go deeper
The operational detail
This page is the summary. These are the working documents behind it.
Ready when you are
Connect a shop, or read the permissions again first
The Free plan needs no card. You can disconnect and purge the cache whenever you like.