Privacy Policy

MadeKeeper ("we," "us") is the back office for people who make things and sell them. This policy covers madekeeper.com and the MadeKeeper app at madekeeper.com/app. The short version: we collect what the product needs to work and nothing more, we never sell data, there are no ads, and you can take your records with you or have them deleted whenever you like.

What we collect

If you're just visiting the site

• Cookieless analytics. We count page views, clicks on our own buttons, and how far people scroll, using our own lightweight beacon plus Cloudflare's cookieless web analytics. The beacon uses a random identifier stored in your browser — it isn't your name, your email, or an advertising ID, and we don't use it to follow you around other sites. No advertising trackers, no third-party ad networks, no fingerprinting.

If you create an account

• Your login. An email address and a password, handled by Supabase (our database and authentication provider). We never see or store your password in readable form.
• Your business records. The materials, recipes, products, sales, events, mileage, expenses, and notes you enter. These are your books. Each account's rows are isolated at the database level (row-level security), so your records are readable by you and no one else's account.
• Your photos. Product photos you upload live in a storage bucket. One honest caveat: uploaded photos get a direct web address so the app can display them. That address isn't listed or guessable, but anyone you share it with could view the photo — so upload the kind of photo you'd put on a product listing, not private ones.

Why we collect it

One reason: to run MadeKeeper for you. Your records power your own dashboard, your event math, and your year-end packet. The analytics tell us which pages help and which confuse. That's the whole list — we don't mine your books for marketing, train models on them, or share them with anyone who'd want to.

Where it lives

• Supabase (database, authentication, and file storage, hosted in the United States) holds your account and business records.
• Stripe processes subscription payments and holds the billing details. MadeKeeper never receives or stores your card number — only Stripe's customer and subscription identifiers, so the app knows whether your account is paid.
• Cloudflare serves the website and app pages, and provides the cookieless visitor analytics. Like any host, its infrastructure keeps standard server logs (IP address, browser type) for security and reliability.

That's the full roster. There is no ad network, no data broker, and no "trusted marketing partner" on this list — and there won't be.

The weather lookup

If you put a ZIP code on an upcoming event, the app looks up the forecast so you know what your booth day looks like. That lookup runs from your own browser: the ZIP goes to a free geocoding service (zippopotam.us) to get coordinates, and the coordinates go to the National Weather Service (api.weather.gov). Only the ZIP and coordinates are sent — never your name, email, or records. Skip the ZIP and no lookup happens.

Shops you connect (Etsy, Square)

MadeKeeper can connect to your Etsy shop or your Square account so your sales arrive without being typed in twice. Connecting is entirely your choice, and nothing is connected by default.

What is requested. Read-only access. For Etsy that is your receipts and your listings — enough to import a sale and match it to one of your products. MadeKeeper does not list items, change prices, message buyers, or take any action inside your shop, and does not ask for the permission to do so.

What is stored, and where. The access token those services issue is held in an encrypted vault inside MadeKeeper's database, never in the app in your browser and never in an ordinary table. What is stored alongside your shop is a reference to that token, your shop's id and name, and the time of the last sync — not the token itself.

Disconnecting. Press Disconnect and the stored token is deleted immediately, and MadeKeeper stops calling that service. You can also revoke MadeKeeper's access from inside your Etsy or Square account at any time, without telling MadeKeeper first. Sales already imported stay in your books, because they are your records — deleting those is the account-deletion path below.

MadeKeeper does not sell, share, or use this data for anything other than showing you your own numbers.

Your rights

These apply to everyone, not just where a law makes us say so (California's CCPA and Europe's GDPR both cover the same ground):

• Access and portability. Your records are exportable from the app as CSV any time, no permission needed. If you want a fuller copy of everything we hold, email us and we'll send it.
• Correction. Everything you enter, you can edit in the app.
• Deletion. Close your account yourself in the app — Settings → Leaving? — or email us and we'll do it for you. Closing cancels billing immediately; your records are kept 60 days so a change of heart can restore them, then they're deleted for good. We may keep the minimum required for legal or tax reasons (for example, billing records), and we'll tell you if so.
• The signup list. Reply "stop" to any email and you're off it.

To exercise any of these, email james@madekeeper.com. A person answers — the same person who built the app.

Security

Everything travels over HTTPS, and each account's records are walled off with row-level security in the database. No system is perfectly secure, and we won't pretend otherwise — but the boring, standard protections are all in place, and the surface area is small on purpose.

Children

MadeKeeper is a business tool for adults. It isn't directed to children, and we don't knowingly collect their information.

Changes

If this policy changes, the date at the top changes with it, and for anything material we'll take reasonable steps to tell you directly. We won't quietly swap a plain policy for a worse one.

Contact

Questions or requests: james@madekeeper.com. (While we finish setting up mail on this domain, james@madekeeper.com reaches the same person.)