# Security & Privacy Scorecard

## Etsy: Shop Home, Style & More

**Overall Score: 85/100** | **Version:** 7.51.1 | **Scan Date:** January 21, 2026

## What This Means for You

Browsing, search, and purchase activity is shared with over a dozen third parties including Facebook, AppsFlyer, Braze, and FullStory, which record in-app behavior and use it for ad targeting. Shopping habits and engagement patterns feed into marketing and attribution networks. Payment processing runs through Stripe.

## Recommendation: Acceptable

**Best For:** Shoppers comfortable with ad and analytics tracking

## Key Findings

**Data Security** - 2 findings (2 critical)

**Network Security** - 2 findings (1 high, 1 medium)

**Code Safety** - 0 findings

**Privacy** - 6 findings (1 critical, 3 high, 1 medium, 1 info)

## Privacy Concerns

### What Data is Collected

Etsy collects browsing history within the app, search queries, items viewed and saved, and purchase history. Device identifiers and usage patterns are gathered to personalize the user experience and support advertising and analytics.

### Third-Party Data Sharing

User activity is shared with more than a dozen third-party services:

- **FullStory** - records in-app sessions and interactions for behavioral analysis
- **AppsFlyer** - tracks installs and in-app events for advertising attribution
- **Facebook SDK** - connects shopping behavior to Facebook's ad targeting network
- **Braze** - delivers personalized push notifications and in-app messaging
- **Branch.io** - handles cross-channel linking and install attribution
- **Button Merchant SDK** - tracks affiliate commerce activity
- **Rokt** - serves targeted offers based on transaction context
- **Firebase / Google Play Services** - analytics and app infrastructure
- **Zendesk** - customer support interactions
- **Qualtrics** - collects feedback through in-app surveys
- **Stripe** - handles payment processing
- **Bugsnag** - captures error and crash reports
- **DataDome** - bot detection and fraud prevention
- **Transcend** - supports privacy compliance and data rights management

## Understanding the Scores

| Category | Score |
|----------|-------|
| Security | 85/100 |
| Privacy | 80/100 |
| Data Security | 80/100 |
| Network Security | 90/100 |
| Code Safety | 85/100 |
| Data Collection | 85/100 |
| Data Sharing | 85/100 |
| User Control | 90/100 |

## Positive Security Features

- Payment processing is delegated to Stripe, a dedicated payment service, rather than handled directly inside the app
- DataDome provides bot detection and fraud prevention, helping protect user accounts from automated abuse
- Transcend facilitates privacy compliance, supporting user rights to access or delete personal data

## Areas for Improvement

- Sensitive data stored on the device, such as saved addresses and shopping preferences, could be better protected against unauthorized access.
- Some network connections do not apply the strictest available protections, which means data travels with less protection than expected in certain conditions.
- The number of third parties receiving user behavioral data is large. Tighter controls over what is shared and with whom would improve user privacy.

---

## About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect observed security and privacy practices at the time of the scan.

### App Details

| Field | Value |
|-------|-------|
| App Name | Etsy: Shop Home, Style & More |
| Package ID | com.etsy.android |
| Version | 7.51.1 |
| Scan Date | January 21, 2026 |
| Platform | Android |