About our tool
Updated 22 October 2026
A small private application connects Sofia Wood Art to one Etsy shop, SofiaWoodArt, through the Etsy Open API. It has a single user: the shop owner.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
Who it is for
Only the owner. Nobody can register, no other seller can add a shop, and the tool is not offered as a product. If that ever changes we will request the right kind of access from Etsy and rewrite this page first.
What it does
- Looks up the shop profile and sections so it works on the right shop.
- Reads our own listings, with prices and stock, to keep our records matched to Etsy.
- Updates our own listings when the owner asks: titles, descriptions, tags, prices, quantities.
- Reads our own orders so each one is made and shipped in good time.
What it leaves alone
- Any other seller's shop, and any data about other shops, sellers or buyers.
- Scraping. Everything goes through the official API.
- Messaging buyers. Conversations stay on Etsy.
- Selling or sharing Etsy data, advertising and marketing platforms, analytics and AI training.
Permissions requested
shops_r | Read the shop profile to confirm which shop is connected. |
|---|---|
listings_r | Read our own listings, prices and stock. |
listings_w | Change our own listings when the owner chooses to. |
transactions_r | Read our own orders in order to fulfil them. |
How the link is made
- The owner opens the private connect page of this site and enters the owner password.
- The owner ticks a box accepting the app terms and the privacy notes. We save the moment and the terms version.
- Etsy shows the permissions and the owner approves them. This is OAuth 2.0 with PKCE, and Etsy returns the owner to
https://sofiawoodart.com/tool/etsy-callback. A pending request lasts ten minutes. - The one-time code becomes tokens. When the Etsy account is not the owner's, they are discarded at once.
How tokens are kept
Both tokens are encrypted with AES-256-GCM before storage, using a key that lives apart from the data. The status page confirms the connection without ever printing a token, and an old access token is renewed before it is used.
Ending the connection
Remove this app from the connected apps in your Etsy account settings and it loses access immediately. The owner can also press disconnect on the status page to delete the stored tokens.
Trademark
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
Questions: hello@sofiawoodart.com