Etsy, Inc. (Nasdaq: ETSY) operates a marketplace for handmade and vintage goods with 86.5 million active buyers and 5.6 million active sellers as of December 31, 2025. Its privacy policy (updated Nov 20, 2025) describes collecting account, identity-verification, usage, device/browser, and cookie data, shared across Etsy Group Companies including Depop. Etsy uses third-party cookies, web beacons, Google Analytics, Meta App Events, and Fullstory session replay, and shares data, including hashed identifiers, with ad partners for interest-based ads, which it notes may be a 'sale' or 'sharing' under California law; an opt-out toggle exists. Sellers above $10,000 in trailing-365-day sales are permanently enrolled in Offsite Ads, promoting listings on third-party ad platforms. Etsy publishes an annual transparency report; no first-party breach or privacy regulator action was identified.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
15 ON FILE
[2020-06-24] · COLLECTION
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
Etsy's Cookies & Similar Technologies Policy (last updated August 25, 2025) discloses use of the third-party session replay tool Fullstory, alongside Google Analytics and Meta App Events, to capture how users interact with its sites and apps; the policy documents an opt-out for these analytics cookies.
Etsy's Privacy Policy (last updated November 20, 2025) describes collection of buyer and seller account information, seller identity-verification information, service usage, device and browser, and cookie data, which may be shared across the Etsy Group Companies, including Etsy Ireland UC and Etsy-owned affiliate Depop Ltd.
Etsy has published an annual Transparency Report since 2015; the 2025 report (covering January-December 2025) discloses that Etsy received 624 member-related subpoenas and similar legal requests, produced records for 441 it deemed valid, and generally notifies affected members before disclosing their records unless legally prohibited.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
Etsy's Privacy Policy (last updated November 20, 2025) identifies the controllers for different regions and states that transfers of user data outside the EEA, including from Etsy Ireland UC to Etsy, Inc. in the United States and to India, rely on the European Commission's Standard Contractual Clauses, with copies available on request.
Etsy, Inc. is a U.S. public company whose annual report on Form 10-K for fiscal year 2025 (filed with the SEC on February 19, 2026) discloses its corporate structure, marketplace scale, and cybersecurity governance, reporting 86.5 million active buyers and 5.6 million active sellers as of December 31, 2025.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes, but you may opt-out.
Etsy's privacy disclosures (privacy policy page as of the November 20, 2025 policy) state that to enable personalized advertising Etsy may share user data with marketing and advertising partners, and that personalized advertising "may be considered a 'sale' or 'sharing' of information under California and other state privacy laws" with a corresponding opt-out toggle.
Etsy's Fees & Payments Policy (last updated February 13, 2026) sets an Offsite Ads advertising fee of 15% on attributed orders (12% for shops that reached $10,000 USD in trailing-365-day sales), and the 12% mandatory-participation fee applies for the lifetime of the shop even if sales later fall below the threshold.
Etsy's Advertising & Marketing Policy (last updated June 8, 2026) states that sellers whose shops reach $10,000 USD in sales over 365 days are permanently barred from opting out of the Offsite Ads program, under which Etsy promotes their listings on third-party platforms such as social networks and search engines at its sole discretion.
In March 2011, NBC News reported that during the rollout of Etsy's People Search feature, changes to default visibility settings made users' real names and shopping histories publicly searchable and indexable by search engines.
In May 2025, Cybernews researchers reported that unprotected cloud storage instances, attributed to a third-party Vietnam-based embroidery seller operating shops on multiple platforms (not Etsy's own infrastructure), exposed roughly 1.6 million shipping-confirmation records, mostly relating to Etsy customers, including names, home addresses, and email addresses.
Etsy's Cookies & Similar Technologies Policy (last updated August 25, 2025) describes third-party cookies that gather cross-site browsing activity, web beacons, remarketing/retargeting, and audience targeting in which Etsy shares hashed identifiers and profile attributes with Google and/or Facebook to build ad audiences.