Our shop tool and Etsy
Updated 22 October 2026
Maply Art runs one private tool that talks to one Etsy shop, MaplyArt, through the Etsy Open API v3. Only the shop owner uses it. It is not published, not for sale and not offered to other sellers.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
Things it does
- Looks up our shop's basic details and sections.
- Reads our own listings, prices and stock so our records match Etsy.
- Creates and edits our own listings: titles, descriptions, photos, tags, prices, quantities.
- Reads our own orders so we know what to build and ship.
Things it never does
- Touch any shop other than MaplyArt, or collect data about other shops, listings or shoppers.
- Scrape Etsy pages. It uses the official API only, inside the rate limits.
- Message buyers. Order and shipping messages stay on Etsy.
- Sell anything, or steer buyers away from Etsy's checkout.
- Sell, rent, or hand on Etsy data; feed it to ad or marketing platforms; run analytics on it; or use it to train AI models.
Permissions we ask Etsy for
| Scope | Why |
|---|---|
| shops_r | Read our shop's name, sections and settings, so the tool knows which shop it is working on. |
| listings_r | Read our own listings, prices and stock levels. |
| listings_w | Create and update our own listings, photos, tags, prices and quantities. |
| transactions_r | Read our own orders so they can be made and shipped on time. |
The sign-in trip
- The owner opens a protected page on this site and ticks "I accept the app terms and privacy policy". We save the time and the terms version.
- The browser goes to Etsy to sign in. We never see the Etsy password.
- Etsy sends the browser back to
https://maplyart.com/owner/callbackwith a single-use code. The flow is OAuth 2.0 with PKCE. - The tool swaps the code for an access token and a refresh token and locks both with AES-256-GCM before saving them. The lock key is kept apart from the database as a secret.
- If the signed-in Etsy user is not the shop owner, the tokens are dropped on the spot.
Turning it off
The owner can remove the app under Etsy account settings, which cuts access immediately. The owner page also has a button that deletes the stored tokens from our side.
Questions
Write to hello@maplyart.com. The inbox is monitored and we reply within two working days.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.