Privacy policy
Operator: Supplement Shelf operator
Google account linking is in preparation. Google-linked email reminders for general users are not currently available. The Google disclosures below apply when linking becomes available and you authorize it.
Shelf data and sign-in
We use the user ID, email address and display name, when supplied, received through ChatGPT sign-in to identify your shelf and display your account. Linking Google does not change shelf ownership. Your products, dates, notes and photos are stored to provide shelf features and are not automatically published to other users. The review board is currently accessible only to the site owner. Existing reviews do not become public merely because the site entrance is public. Any future audience change would be explained separately.
Contact messages
We store your message subject, text, optional reply email and in-site replies to handle inquiries. Signed-in senders and administrators can read their contact messages; guest submissions are readable only by administrators. Both are included in full backups available to the authorized backup owner. Guests cannot view message history or in-site replies. Your reply email is used for that inquiry, not advertising.
Google information
If you authorize linking, we store your Google account identifier, verified email address, sending permission information and connection status. Access and refresh tokens used for Gmail sending are encrypted on the server. We do not request permission to read your inbox or email messages. Google information is used only for linking and reminders to yourself, not sold or used for advertising or marketing.
Email reminders and recipients
If scheduled sending becomes available, you must still review the recipient and content and separately turn reminders on. Reminders are designed to go to your own linked Google account and contain due restocking item names, dates and purchase links. They exclude notes, photos and private contact messages. The recipient and this content are sent to Google/Gmail when sending. Reminders are not active without a ready sending service, even if a notification preference is on.
Storage, safeguards and backups
OpenAI Sites and its hosting infrastructure process and store service data. Google also processes connection authentication. The authorized backup owner can access full backups containing private shelf notes, photo metadata and contact messages. Connection tokens and temporary authorization-transaction data are excluded from ordinary backup exports. Connection metadata, including Google identifier, email and connection status, is included, but restoration requires relinking. Hosting providers may process technical request information. Log coverage and retention depend on provider settings; we do not guarantee a single retention period.
Disconnecting and Google permission
Disconnecting Google in notification settings deletes locally stored tokens and invalidates pending connection attempts. It does not delete your shelf. Disconnecting locally does not remove the permission remaining at Google. Use Google account connections to remove this service’s access.
Retention and deletion requests
Shelf and inquiry records have no uniform automatic deletion deadline. Records may remain in backups. Google authorization attempts expire after 10 minutes; expiration does not immediately erase all stored transaction data. Expired temporary records are cleaned up incrementally when new connections start. Contact us to request access, correction or deletion. We will explain the available handling after verifying identity and scope. This is not an instant automatic whole-account deletion feature.
Cookies and device preferences
Preferences such as display language are stored in cookies or device storage. When Google linking is available, a 10-minute cookie correlates the browser that started the connection. Sign-in also uses cookies or similar mechanisms from the authentication service.
Changes
We update this page and relevant in-product notices when data use or features change. Before using Google information for a new purpose, we will request the necessary consent.